This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Ivanti fixes 5 high-severity vulnerabilities

Ivanti version 6.4.5 fixes 5 high-severity vulnerabilities in the Avalanche product [1].

Ivanti Avalanche - sensitive information leakage (CVE-2024-47008)
CVSS 7.5 (High)

An unauthenticated remote attacker can, through a server-side request forgery (SSRF) vulnerability, gain access to potentially sensitive information [1][2].

The vulnerability is present in product:

  • Ivanti Avalanche; <=6.4.2.313

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

More information:

The vulnerability was publicly disclosed 8. 10. 2024.

Ivanti Avalanche - sensitive information leakage (CVE-2024-47011)
CVSS 7.5 (High)

An unauthenticated remote attacker can access files or directories outside the restricted area of the application, which may lead to the leakage of potentially sensitive information [1][3][4].

The vulnerability is present in product:

  • Ivanti Avalanche; <=6.4.2.313

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

More information:

  • CVE-2024-47011 at cve.org, NVD
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') at cwe.mitre.org

The vulnerability was publicly disclosed 8. 10. 2024.

Ivanti Avalanche - denial of service (CVE-2024-47007)
CVSS 7.5 (High)

An unauthenticated remote attacker can carry out a DoS attack through a null pointer dereference in the file WLAvalancheService.exe [1][5].

The vulnerability is present in product:

  • Ivanti Avalanche; <=6.4.2.313

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

More information:

The vulnerability was publicly disclosed 8. 10. 2024.

Ivanti Avalanche - authentication bypass (CVE-2024-47009, CVE-2024-47010)
CVSS 7.3 (High)

An unauthenticated remote attacker can access files or directories outside the restricted area of the application and bypass authentication [1][6][7].

The vulnerability is present in product:

  • Ivanti Avalanche; <=6.4.2.313

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

More information:

  • CVE-2024-47009 at cve.org, NVD
  • CVE-2024-47010 at cve.org, NVD
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') at cwe.mitre.org
  • CWE-288: Authentication Bypass Using an Alternate Path or Channel at cwe.mitre.org

The vulnerability was publicly disclosed 8. 10. 2024.

By CESNET, z.s.p.o. Michaela Ručková on 15. 10. 2024.

CESNET, z.s.p.o. Logo