CVE-2024-29848

HIGH 7.2CVE-2024-29848 · Published 31/05/2024 · updated 17/06/2026

Package	Affected versions	Patched versions
avalanche ivanti	`< 6.4.3.602`	`6.4.3.602`

Description

An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM.

References

forums.ivanti.com/s/article/Security-Advisory-May-2024 · Vendor Advisory
forums.ivanti.com/s/article/Avalanche-6-4-3-602-additional-security-hardening-and-CVE-fixed · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free