VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Aug 14, 2024· Updated Jun 17, 2026

CVE-2024-38652

CVE-2024-38652

Description

Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to achieve denial of service via arbitrary file deletion.

Affected products

22
  • Ivanti/Avalanche22 versions
    cpe:2.3:a:ivanti:avalanche:6.3.1.1507:*:*:*:premise:*:*:*+ 21 more
    • cpe:2.3:a:ivanti:avalanche:6.3.1.1507:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.1:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.2.3490:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.2.3490:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.2:*:*:*:*:windows:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.2:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.3.101:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.3.101:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.3:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.4.153:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.3.4:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.4.1.207:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.4.1.236:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.4.1:*:*:*:premise:*:*:*
    • cpe:2.3:a:ivanti:avalanche:6.4.2:*:*:*:premise:*:*:*
    • (no CPE)range: <6.3.1
    • (no CPE)range: 6.4.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.