CVE-2024-47009

Critical

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

ivanti·CWE-22·Published 2024-10-08

CVSS

9.8

EPSS

0.02

KEV

Exploits

cve.orgen

122 chars

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

NVDen

122 chars

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

NVDes

132 chars

Path Traversal en Ivanti Avalanche anterior a la versión 6.4.5 permite que un atacante remoto no autenticado evite la autenticación.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	7.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L