Skip to content
OpenAdvisories
High · 7.1 CVE-2024-27984 EUVD-2024-25158GHSA-j3pf-jvpq-m354

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete specific …

Published Apr 19, 2024 · Updated Aug 2, 2024 · Assigned by hackerone

Description

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete specific type of files and/or cause denial of service.

Affected products

VendorProductAffectedFixed
Ivanti Avalanche 6.4.3 – < 6.4.3 6.4.3

Advisories 1

References