Path Traversal Vulnerability in Ivanti Avalanche Software
CVE-2024-13181

9.8CRITICAL

Key Information:

Vendor

Ivanti
Status
Avalanche
Vendor
CVE Published:
14 January 2025

What is CVE-2024-13181?

Ivanti Avalanche versions earlier than 6.4.7 are susceptible to a path traversal vulnerability, allowing remote unauthenticated attackers to bypass authentication procedures. This vulnerability is a result of incomplete patches from a prior security issue, necessitating immediate updates to the affected versions to ensure system integrity.

Affected Version(s)

Avalanche 6.4.7

References

https://forums.ivanti.com/s/article/Security-Advisory-Iva...

EPSS Score

6% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.