Medium WID-SEC-2025-0073 3 CVEs

Ivanti Avalanche: Mehrere Schwachstellen

Published Jan 14, 2025 · Updated Jan 14, 2025 · de-DE

Vendor: ivanti Product: Avalanche Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ivanti Avalanche ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um Informationen offenzulegen.

Product

Ivanti Avalanche ist eine Mobile Device Management Lösung.

Vulnerabilities 3

High 7.5

CVE-2024-13180 EPSS 27%

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive info…

ivanti Avalanche Network devices

Jan 14, 2025
High 7.3

CVE-2024-13179 EPSS 64%

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authenticati…

ivanti Avalanche Network devices

Jan 14, 2025
High 7.3

CVE-2024-13181 EPSS 33%

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authenticati…

ivanti Avalanche Network devices

Jan 14, 2025

Revision history

2025-01-14 #1
Initiale Fassung

References

Ivanti Security Advisory vom 2025-01-14
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs?language=en_US