Unauthenticated Remote Attacker Can Read Sensitive Information in Memory via Out-of-Bounds Read Vulnerability in Ivanti Avalanche Before 6.4.3

CVE-2024-23529

What is CVE-2024-23529?

An out-of-bounds read vulnerability exists in the WLAvalancheService component of Ivanti Avalanche prior to version 6.4.3. This vulnerability can be exploited by an unauthenticated remote attacker under specific conditions, allowing them to access and read sensitive information stored in memory. Organizations using affected versions of Ivanti Avalanche should evaluate their systems for vulnerability exposure and apply the necessary security updates to prevent unauthorized access.

References