Description
Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Avalanche | — | 6.4.5 |
Advisories 2
- NCSC-2024-0400 Kwetsbaarheden verholpen in Ivanti Avalanche NCSC-NL (Netherlands) · Oct 9, 2024
- WID-SEC-2024-3113 Ivanti Avalanche: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 8, 2024