4473 matches found
CVE-2024-47011
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information...
CVE-2024-47011
Ivanti Avalanche is affected by a path traversal vulnerability (CVE-2024-47011) that allows a remote unauthenticated attacker to leak sensitive information in versions prior to 6.4.5. Public disclosures and Red Hat/NVD entries corroborate the issue and indicate that fixes were introduced in later...
CVE-2024-47011
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information...
CVE-2024-47010
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication...
CVE-2024-47010
CVE-2024-47010 affects Ivanti Avalanche prior to version 6.4.5, with a path traversal that enables a remote unauthenticated attacker to bypass authentication. The issue is addressed by Ivanti in 6.4.5 (and related advisories), and references indicate follow‑ups for related CVEs (e.g., 6.4.7) addr...
CVE-2024-47010
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication...
CVE-2024-47009
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication...
CVE-2024-47009
Ivanti Avalanche before 6.4.5 is affected by a Path Traversal vulnerability (CVE-2024-47009) that allows a remote, unauthenticated attacker to bypass authentication. The issue is documented across multiple sources (e.g., Red Hat advisory, NVD/NASL plugin context, NCCS/Nessus notes) and is address...
CVE-2024-47009
Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication...
CVE-2024-47008
Ivanti Avalanche prior to version 6.4.5 is affected by a Server-Side Request Forgery (SSRF) that allows remote, unauthenticated attackers to disclose sensitive information via the validateAMCWSConnection path. The CVE entry CVE-2024-47008 is rated HIGH (CVSS v3.1: 7.5) with network attack, low co...
CVE-2024-47008
Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information...
CVE-2024-47008
Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information...
CVE-2024-47007
A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-47007
A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-47007
Ivanti Avalanche before version 6.4.5 is affected by CVE-2024-47007 due to a NULL pointer dereference in WLAvalancheService.exe, which can be exploited remotely by an unauthenticated attacker to cause a denial of service. The vulnerability is fixed in Avalanche 6.4.5; upgrade to 6.4.5 to remediat...
CVE-2024-9167
CVE-2024-9167 concerns Ivanti Velocity License Server prior to version 5.2, where insecure file/permission handling allows a locally authenticated attacker to escalate privileges. The underlying issue is insecure permissions that fail to enforce proper access controls, enabling a LOCAL, LOW-COMPL...
CVE-2024-9167
Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation...
CVE-2024-9167
Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation...