CVE-2025-8297

Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

PT-2025-32676 · Ivanti · Ivanti Avalanche

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.8.8008 Description: An incomplete restriction of configuration in Ivanti Avalanche allows a remote authenticated attacker with admin privileges to achieve remote code execution. Recommendations: Update...