CVE-2024-50321

Summary

CVE-2024-50321 is a recently disclosed vulnerability that affects Ivanti Avalanche versions prior to 6.4.6. This issue involves an infinite loop, which enables an unauthenticated remote attacker to induce a denial of service (DoS) condition. By manipulating specific inputs, the attacker can trigger this vulnerability and cause Ivanti Avalanche to consume excessive system resources, ultimately leading to a crash or service outage. The effects of this vulnerability can range from minor inconvenience to significant downtime, depending on the severity and scale of the attack. Organizations running affected versions of Ivanti Avalanche are advised to upgrade as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.