PT-2024-2920 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Null Pointer Dereference issue in the WLAvalancheService component allows an authenticated remote attacker to perform denial of service attacks. The vulnerability is related to pointer...

PT-2024-2908 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a use-after-free vulnerability in the WLAvalancheService component of the Ivanti Avalanche mobile device management system. This vulnerability is associated with th...

PT-2024-2906 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Path Traversal vulnerability in the web component of Ivanti Avalanche. This vulnerability can be exploited by a remote authenticated attacker to execute arbitrary...

PT-2024-2926 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Path Traversal vulnerability in the web component of Ivanti Avalanche allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. The issue is related to incorrect...

PT-2024-2907 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to an out-of-bounds read vulnerability in the WLAvalancheService component. This vulnerability can allow an unauthenticated remote attacker to read sensitive informati...

PT-2024-2921 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Path Traversal vulnerability in the web component of Ivanti Avalanche allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. The issue is related to incorrect...

PT-2024-2925 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to an integer overflow in the WLInfoRailService component when handling field lengths. This can be exploited by a remote attacker to cause a denial of service. In rare...

PT-2024-2914 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Path Traversal vulnerability in the web component of Ivanti Avalanche. This vulnerability is caused by incorrect restriction of the directory path name with limit...

PT-2024-2918 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Path Traversal vulnerability in the web component of Ivanti Avalanche. This vulnerability allows a remote authenticated attacker to delete specific types of files...

PT-2024-2909

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.4.3 Description The issue is related to a Path Traversal vulnerability in the web component of Ivanti Avalanche. This vulnerability allows a remote authenticated attacker to execute arbitrary commands as...

PT-2024-2930 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a heap overflow vulnerability in the WLAvalancheService component. This vulnerability can be exploited by a remote unauthenticated attacker to execute arbitrary...

PT-2024-2916 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to an out-of-bounds read in the WLAvalancheService component, which can allow a remote attacker to disclose sensitive information. Recommendations: For versions prior ...

PT-2024-2911 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Race Condition TOCTOU vulnerability in the web component of Ivanti Avalanche allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. This issue is related to...

PT-2024-2929 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Heap Overflow vulnerability in the WLInfoRailService component allows a remote unauthenticated attacker to execute arbitrary commands. The vulnerability is related to a buffer overflow i...

PT-2024-2905 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Race Condition TOCTOU vulnerability in the web component of Ivanti Avalanche. This vulnerability can be exploited by a remote authenticated attacker to execute...

PT-2024-2910 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Path Traversal vulnerability in the web component of Ivanti Avalanche. This vulnerability is caused by incorrect restriction of the directory path name with limit...

PT-2024-2836 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: A Heap overflow vulnerability in the WLInfoRailService component allows an unauthenticated remote attacker to execute arbitrary commands. The vulnerability is related to a heap-based buffe...

PT-2024-2915 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Path Traversal vulnerability in the web component of Ivanti Avalanche. This vulnerability is due to incorrect restriction of a pathname to a restricted directory...

PT-2024-2917 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: An out-of-bounds read issue in the WLAvalancheService component can allow an unauthenticated remote attacker to read sensitive information in memory under certain conditions...

PT-2024-2912 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.3 Description: The issue is related to a Path Traversal vulnerability in the web component of Ivanti Avalanche. This vulnerability is due to incorrect restriction of the directory path name with limited...