Unrated severityNVD Advisory· Published Apr 19, 2024· Updated Aug 2, 2024

CVE-2024-27977

Description

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete arbitrary files, thereby leading to Denial-of-Service.

Affected products

Ivanti/Avalanchellm-fuzzy2 versions
<6.4.3+ 1 more
- (no CPE)range: <6.4.3
- (no CPE)range: 6.4.3

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressedmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000