CVE-2024-13179

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published Jan 14, 2025
CWE ID 22
CWE ID 288

Summary

CVE-2024-13179 is a newly disclosed vulnerability affecting Ivanti Avalanche prior to version 6.4.7. This issue enables a remote, unauthenticated attacker to traverse paths, bypassing the authentication process. The impact of successful exploitation could result in unauthorized access to sensitive information or system compromise. Organizations using Ivanti Avalanche are strongly urged to upgrade to a patched version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Ivanti Avalanche

Affected Vendors

  • Ivanti Software Inc.

Advisories, Assessments, and Mitigations