CVE-2024-29848

Mô tả

Tham khảo

• forums.ivanti.com/s/article/Security-Advisory-May-2024 · Vendor Advisory
• forums.ivanti.com/s/article/Avalanche-6-4-3-602-additional-security-hardening-and-CVE-fixed · Vendor Advisory

Lỗ hổng khác của avalanche

• CVE-2025-8297CAO 7.2Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin priv…
• CVE-2025-8296CAO 7.2SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execute arbitrar…
• CVE-2023-38036NGHIÊM TRỌNG 9.8A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overf…
• CVE-2024-13181NGHIÊM TRỌNG 9.8Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresse…
• CVE-2024-13180CAO 7.5Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE add…