CVE-2024-23530

An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory...

CVE-2024-23530

Ivanti Avalanche before 6.4.3 is affected by an out-of-bounds read in the WLAvalancheService component, allowing an unauthenticated remote attacker to read sensitive information from memory. Public references (e.g., ZDI-24-375) confirm the flaw in WLAvalancheService and note the vulnerability can...