Skip to content
OpenAdvisories
Unscored CVE-2018-8902 EUVD-2018-20510GHSA-fwc5-p88w-fh8w

An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption…

Published Jun 29, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include Wi-Fi passwords. This discovered key can be used for all instances of the product.

References