Lucene search

K
zdi06fe5fd2bc53027c4a3b7e395af0b850e7b8a044ZDI-23-1116
HistoryAug 15, 2023 - 12:00 a.m.

Ivanti Avalanche dumpHeap Incorrect Permission Assignment Authentication Bypass Vulnerability

2023-08-1500:00:00
06fe5fd2bc53027c4a3b7e395af0b850e7b8a044
www.zerodayinitiative.com
5
ivanti avalanche
authentication bypass
incorrect permission assignment
dumpheap method

0.018 Low

EPSS

Percentile

88.2%

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dumpHeap method. The issue results from an incorrect permission assignment. An attacker can leverage this vulnerability to bypass authentication on the system.

0.018 Low

EPSS

Percentile

88.2%

Related for ZDI-23-1116