CVEブラウザに戻る

CVE-2024-37373

HIGH

7.2

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-08-14

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE.

Affected Platforms (CPE)

📦

Ivanti

Avalanche

= 6.3.1= 6.3.1.1507= 6.3.2= 6.3.2.3490= 6.3.3= 6.3.3.101= 6.3.4= 6.3.4.153= 6.4.0= 6.4.1= 6.4.1.207= 6.4.1.236= 6.4.2

References & Advisories

🔗 https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-4-CVE-2024-38652-CVE-2024-38653-CVE-2024-36136-CVE-2024-37399-CVE-2024-37373

関連する脆弱性情報

CVE-2025-82977.2

Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with ...

CVE-2025-82967.2

SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges to execut...

CVE-2023-380369.8

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a bu...

CVE-2024-131817.3

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CV...