4 matches found
CVE-2024-23535
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...
8.8CVSS7.5AI score0.68104EPSS
SaveExploits0References1
CVE-2024-23535
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...
8.8CVSS8.8AI score0.68104EPSS
SaveExploits0References1
CVE-2024-23535
CVE-2024-23535 describes a path traversal vulnerability in the web component of Ivanti Avalanche prior to 6.4.3. An authenticated remote attacker can exploit an insufficiently restricted pathname in the web component to execute arbitrary commands as SYSTEM. Root cause cited in connected sources i...
8.8CVSS8.6AI score0.68104EPSS
SaveExploits0References1Affected Software1
20