Path Traversal Vulnerability in Ivanti Avalanche Affects Sensitive Data Security

CVE-2024-13180

What is CVE-2024-13180?

Ivanti Avalanche versions prior to 6.4.7 are susceptible to a path traversal vulnerability that enables remote unauthenticated attackers to access restricted files, potentially leading to the unauthorized disclosure of sensitive information. This vulnerability arises from incomplete mitigations implemented in a prior CVE, highlighting the need for users to promptly update to the latest version to ensure their data remains secure.

References