CVE-2024-47009

published 2024-10-08

CVE-2024-47009: Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

Priority P2 71 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ivanti	avalanche	< 6.4.5	6.4.5

Detection & IOCs extracted from sources · hover to see the quote

• → Path Traversal vulnerability in Ivanti Avalanche before version 6.4.5 allows remote unauthenticated attackers to bypass authentication via CWE-22 (Path Traversal) and CWE-288 (Authentication Bypass Using an Alternate Path or Channel) ↗

• · Vulnerability affects Ivanti Avalanche versions prior to 6.4.5; upgrade to 6.4.5 or later to remediate ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22 CWE-288