Remote File Delete Vulnerability Leads to Denial-of-Service

CVE-2024-27977

Summary

The vulnerability in the web component of Ivanti Avalanche prior to version 6.4.3 enables an authenticated remote attacker to exploit path traversal techniques, resulting in the ability to delete arbitrary files. This can lead to significant disruptions in service, manifesting as Denial-of-Service, and could compromise the integrity and availability of the affected system. Organizations using affected versions should prioritize updating to secure versions to mitigate risks.

References