CVE-2024-50317

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 476

Summary

CVE-2024-50317 is a newly disclosed vulnerability affecting Ivanti Avalanche before version 6.4.6. This issue permits an unauthenticated remote attacker to trigger a denial-of-service condition through a null pointer dereference. By exploiting this vulnerability, an adversary can cause Ivanti Avalanche to crash, resulting in service disruption. This flaw poses a significant risk to organizations using the affected version, urging them to update as soon as possible to mitigate the threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Ivanti Avalanche

Affected Vendors

  • Ivanti Software Inc.

Advisories, Assessments, and Mitigations