Skip to content
OpenAdvisories
High · 7.2 CVE-2024-37373 EUVD-2024-36620GHSA-4g7p-53pf-4mw9

Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to ac…

Published Aug 14, 2024 · Updated Aug 16, 2024 · Assigned by hackerone

Vendor: ivanti Product: Avalanche Category: Network devices

Description

Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE.

Affected products

VendorProductAffectedFixed
Ivanti Avalanche 6.4.4 – < 6.4.4 6.4.4

Advisories 2

References