CVE-2024-47008

Description

Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.

References

• https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-42225
• https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory