CVE-2022-36973: Ivanti Avalanche EnterpriseServer Service SQL Injection Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-15329.
Other sources
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can leverage this vulnerability to bypass authentication on the system.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-36973.
What is the severity of CVE-2022-36973?
The severity of CVE-2022-36973 is critical with a CVSS score of 9.1.
What software is affected by CVE-2022-36973?
The affected software is Ivanti Avalanche version 6.3.2.3490 up to but not including version 6.3.4.
How does CVE-2022-36973 work?
CVE-2022-36973 allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
Is authentication required to exploit CVE-2022-36973?
Yes, although authentication is required to exploit CVE-2022-36973, the existing authentication mechanism can be bypassed.