CVE-2024-47010
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 8, 2024
Updated: Oct 16, 2024
CWE ID 22
CWE ID 288
Summary
CVE-2024-4701 is a newly disclosed vulnerability affecting Ivanti Avalanche before version 6.4.5. This issue permits an unauthenticated remote attacker to bypass authentication through a path traversal technique. By manipulating file paths, the attacker can gain access to restricted information or even execute arbitrary code. This vulnerability poses a significant risk to organizations using Ivanti Avalanche and emphasizes the importance of applying the available patch promptly to secure their systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Ivanti Avalanche
Affected Vendors
- Ivanti