CVE-2024-13181

Ivanti / Avalanche PUBLISHED

Description (CNA)

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.

Affected (CNA)

Vendor / product	Versions
Ivanti / Avalanche	unaffected 6.4.7

CWE

CWE-22, CWE-288

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.