CVE-2018-8902

Ivanti Avalanche (versions 5.3–6.2) contains an information-disclosure vulnerability due to a single shared-key encryption model. An attacker with access to system databases can use the discovered key to read potentially confidential stored data (e.g., Wi‑Fi passwords). The key is reported as usa...