CVE-2024-13179

Description

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.

References

• https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-51401
• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs