CVE-2024-24996

A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute arbitrary commands...

CVE-2024-24996

Ivanti Avalanche is affected by CVE-2024-24996 due to a heap overflow in the WLInfoRailService component prior to 6.4.3. This allows an unauthenticated, remote attacker to execute arbitrary commands with SYSTEM-level impact (as indicated by sources describing remote code execution and high severi...