CVE-2024-24998

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...

CVE-2024-24998

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...

CVE-2024-24998

CVE-2024-24998 concerns Ivanti Avalanche. Connected sources confirm a Path Traversal vulnerability in the web component of Ivanti Avalanche, prior to version 6.4.3, which allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. The root cause is improper handling/validation...