NetSight
high7.2

CVE-2024-37373

Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE.

Impact

Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE.

Affected products

VendorProductAffected versions
IvantiAvalanche
Versions 6.3.1, 6.3.1.1507, 6.3.2, 6.3.2.3490, 6.3.3, 6.3.3.101

Weakness classification

References