Unauthorized Information Leakage Through Path Traversal in Ivanti Avalanche Before v6.4.5

CVE-2024-47011

Summary

A vulnerability exists in Ivanti Avalanche prior to version 6.4.5 that allows a remote unauthenticated attacker to exploit Path Traversal. This security flaw can result in sensitive information being leaked, potentially exposing confidential data and compromising the security of affected organizations. It is imperative for users of Ivanti Avalanche to upgrade to the latest version to mitigate this risk.

References