CVE-2024-13180

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011...

CVE-2024-13180

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011...

CVE-2024-13180

Ivanti Avalanche is affected by a path traversal vulnerability (CVE-2024-13180) in versions prior to 6.4.7. The issue allows a remote unauthenticated attacker to leak sensitive information due to improper filtering of path elements. The problem is tied to incomplete fixes for CVE-2024-47011. Affe...

CVE-2024-13179

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication...

CVE-2024-13179

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication...

CVE-2024-13179

CVE-2024-13179 affects Ivanti Avalanche before 6.4.7. A path traversal flaw allows a remote unauthenticated attacker to bypass authentication. The Red Hat/CNVD/ZDI/EUVD and Ivanti advisories corroborate this entry and state the fix is to upgrade to Ivanti Avalanche 6.4.7 (or later). If exploiting...

EUVD-2024-51401

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication...

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Avalanche, Ivanti Application Control Engine, and Ivanti EPM. CISA encourages users and administrators to review the following Ivanti security advisories and apply the necessary guidance and updates: Ivanti Avalanchelink is...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management MDM solution for managing devices such as smartphones, tablets, and industrial mobile computers to ensure their security, availability, and accessibility. Ivanti Avalanche suffers from a path traversal vulnerability that can be exploited ...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management MDM solution for managing devices such as smartphones, tablets, and industrial mobile computers to ensure their security, availability, and accessibility. Ivanti Avalanche suffers from a path traversal vulnerability that can be exploited ...

Ivanti Avalanche 路径遍历漏洞

Ivanti Avalanche is an enterprise mobile device management MDM solution for managing devices such as smartphones, tablets, and industrial mobile computers to ensure their security, availability, and accessibility. Ivanti Avalanche suffers from a path traversal vulnerability that stems from the...

Security Advisory Ivanti Avalanche 6.4.7 (Multiple CVEs)

Summary Ivanti has released updates for Ivanti Avalanche which addresses three high severity vulnerabilities. Successful exploitation of CVE-2024-13181 could allow a remote unauthenticated attacker to bypass authentication. CVE-2024-13180 could allow a remote unauthenticated attacker to leak...

PT-2025-2040 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.7 Description: The issue allows a remote unauthenticated attacker to bypass authentication due to a path traversal vulnerability. This vulnerability addresses incomplete fixes from a previous issue...

Ivanti Avalanche < 6.4.3.602 Unrestriceted File upload Vulnerability

The version of Ivanti Avalanche running on the remote host is prior to 6.4.3.602. It is, therefore, is affected by a vulnerability as referenced in the CVE-2024-29848 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version...

Ivanti Avalanche FileStoreConfig Unrestricted File Upload Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileStoreConfig app. The issue results from the lack of proper validation of...

VulnCheck KEV: CVE-2024-38653

XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server...

The vulnerability of the WLAvalancheService method in the Ivanti Avalanche mobile device management system allows a hacker to trigger a service failure.

The vulnerability of the WLAvalancheService method in the Ivanti Avalanche mobile device management system is related to the handling of the zero pointer. Exploiting this vulnerability could allow attackers to trigger a service failure...

The vulnerability of the Ivanti Avalanche device management system, related to executing a loop with an unavailable exit condition, allows a intruder to trigger a service failure.

The vulnerability of the Ivanti Avalanche device management system lies in the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the Ivanti Avalanche device management system, related to the swapping of the zero indicator, allows a intruder to trigger a service failure.

The vulnerability of the Ivanti Avalanche device management system is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...

The vulnerability of the Ivanti Avalanche device management system, related to the swapping of the zero indicator, allows a intruder to trigger a service failure.

The vulnerability of the Ivanti Avalanche device management system is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...