CVE-2018-8902

An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include...

Code injection

An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include...

PT-2018-18703

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions 5.3 through 6.2 Description An issue was discovered where the impacted products use a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access...