CVE-2024-37403

MEDIUM 5.5CVE-2024-37403 · Published 07/08/2024 · updated 17/06/2026

In short

CVE-2024-37403 is a MEDIUM (CVSS 5.5) vulnerability affecting docs@work (ivanti).
Chance of exploitation in the next 30 days (EPSS): 0.46%, higher than 39.8% of all vulnerabilities.
Fix: update to 2.26.0 or later.

Package	Affected versions	Patched versions
docs@work ivanti	`< 2.26.0`	`2.26.0`

Description

Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to properly sanitize file names, resulting in a path traversal-affiliated vulnerability. This potentially enables other malicious apps on the device to read sensitive information stored in the app root.

References

forums.ivanti.com/s/article/Security-Advisory-CVE-2024-37403-Dirty-Stream-for-Ivanti-Docs-Work-for-Android · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free