CVE-2024-29848 — Ivanti / Avalanche

Description (CNA)

An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM.

Affected (CNA)

Vendor / product	Versions
Ivanti / Avalanche	affected 6.4.3 through 6.4.3

CWE

No CWE identifiers supplied.

References

https://forums.ivanti.com/s/article/Security-Advisory-May-2024

ADP enrichment

CISA-ADP

No English description supplied.

https://forums.ivanti.com/s/article/Avalanche-6-4-3-602-additional-security-hardening-and-CVE-fixed?language=en_US

CVE

No English description supplied.

https://forums.ivanti.com/s/article/Avalanche-6-4-3-602-additional-security-hardening-and-CVE-fixed?language=en_US
https://forums.ivanti.com/s/article/Security-Advisory-May-2024