Description
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Avalanche | — | 6.4.7 |
Advisories 1
- WID-SEC-2025-0073 Ivanti Avalanche: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 14, 2025