CVE-2023-28127

A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosure...

CVE-2023-28127

Ivanti Avalanche (product: Avalanche) is affected by CVE-2023-28127 in versions 6.3.x and earlier, due to a path traversal vulnerability in the getLogFile routine that can disclose information. The Red Hat, NVD, CNNVD, PRION, ZDI and PT-2023-21584 entries corroborate the same flaw: improper valid...