Remote Code Execution Vulnerability in Ivanti Avalanche 6.3.1

CVE-2024-37373

Summary

A significant vulnerability exists in Ivanti Avalanche versions 6.3.1 and 6.4.4, where improper input validation in the Central Filestore can be exploited by a remote authenticated attacker with administrative rights. This flaw potentially allows the attacker to execute arbitrary code remotely, posing a major threat to system integrity and data safety. Organizations using affected versions should prioritize patching and review their security measures to mitigate this vulnerability.

References