Skip to content

CVE PROGRAM SOURCE RECORD7.3 High

CVE-2024-13179

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2025-01-14
Updated: 2025-01-16
Assigning organization: ivanti

Description

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ivanti Avalanche

Default version status: affected

6.4.7unaffected

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs ↗