Description
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Avalanche | 6.4.0 – < 6.4.1 | 6.4.1 |
Advisories 1
- WID-SEC-2025-1538 Ivanti Avalanche (Wavelink Manager): Schwachstelle ermöglicht Codeausführung oder Denial-of-Service BSI CERT-Bund (WID) · Jul 13, 2025