CVE-2024-13180
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 22
Summary
CVE-2024-13180 is a newly discovered path traversal vulnerability affecting Ivanti Avalanche prior to version 6.4.7. This issue enables unauthenticated attackers to access sensitive information remotely. It represents incomplete remediation from a previous vulnerability, CVE-2024-47011, which also had path traversal concerns.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Ivanti Avalanche
Affected Vendors
- Ivanti Software Inc.