Today > | 3 Medium | 2 Low vulnerabilities - You can now download lists of IOCs here!

CVE-2024-27977

April 19, 2024, 1:10 p.m.

CVSS Score

7.1 / 10

Product(s) Impacted

Ivanti Avalanche

before 6.4.3

Description

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to delete arbitrary files, thereby leading to Denial-of-Service.

Weaknesses

Date

Published: April 19, 2024, 2:15 a.m.

Last Modified: April 19, 2024, 1:10 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

support@hackerone.com

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

Base Score

7.1

Exploitability Score

Impact Score

Base Severity