CVE-2024-29848

Summary

An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM.

Affected Software

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

Additional References

• https://forums.ivanti.com/s/article/Avalanche-6-4-3-602-additional-security-hardening-and-CVE-fixed?language=en_US

CVE Program Container

Additional References

• https://forums.ivanti.com/s/article/Avalanche-6-4-3-602-additional-security-hardening-and-CVE-fixed?language=en_US
• https://forums.ivanti.com/s/article/Security-Advisory-May-2024

References

• https://forums.ivanti.com/s/article/Security-Advisory-May-2024

• ←Previous
• Next→