8.8 High

CVE-2024-24999 A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated…

Description

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.

Affected products and versions

Product	Affected versions	Fixed in
Avlanche 6.4	earliest → < 6.4.3	6.4.3
Avalanche 6.4	earliest → < 6.4.3	6.4.3

References

forums.ivanti.com forums.ivanti.com

Timeline

Published April 19, 2024
Last modified December 16, 2025

Track this CVE