CVE-2024-47008
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 8, 2024
Updated: Oct 16, 2024
CWE ID 918
Summary
CVE-2024-47008 is a server-side request forgery vulnerability affecting Ivanti Avalanche before version 6.4.5. This issue allows unauthenticated attackers to manipulate requests, tricking the server into leaking sensitive information. Successful exploitation of this vulnerability could result in the exposure of confidential data, posing a significant risk to organizations using the affected Ivanti Avalanche version. It is highly recommended that users upgrade to version 6.4.5 or later to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Ivanti Avalanche
Affected Vendors
- Ivanti