VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 29, 2018· Updated Jun 17, 2026

CVE-2018-8902

CVE-2018-8902

Description

An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include Wi-Fi passwords. This discovered key can be used for all instances of the product.

Affected products

2
  • Ivanti/Avalanche2 versions
    cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*range: >=5.3,<=6.2
    • (no CPE)range: >=5.3, <=6.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.