← All advisories

High severity7.5NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026

CVE-2023-28127

CVE-2023-28127

Description

A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosure.

Affected products

3

Ivanti/Avalanche2 versions
cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ivanti:avalanche:*:*:*:*:*:*:*:*range: <=6.3.4.153
- (no CPE)range: <=6.3.x
Avalanche/Avalanchecpe-rescue

Patches

Vulnerability mechanics

References

1

forums.ivanti.com/s/article/ZDI-CAN-17769-Ivanti-Avalanche-getLogFile-Directory-Traversal-Information-DisclosurenvdVendor Advisory

News mentions

0

No linked articles in our index yet.