VulnCheck KEV: CVE-2021-30497

Ivanti Avalanche Premise 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed by the /AvalancheWeb/image endpoint is not verified to be within the scope of the image folder, e.g., the attacker can obtain sensitive...

CVE-2021-30497: Improper Limitation of a Pathname to a Restricted Directory

Ivanti Avalanche Premise 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed by the /AvalancheWeb/image endpoint is not verified to be within the scope of the image folder, e.g., the attacker can obtain sensitive...

Ivanti Avalanche 路径遍历漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche 6.3.2, which stems from the imageFilePath parameter processed b...

PT-2022-10018

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche Premise version 6.3.2 Description The issue allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. This is due to the imageFilePath parameter not being verified to be within the scope of the...