CVE-2023-28127: Path Traversal
Published May 9, 2023
·Updated
A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosure.
Affected Software
1 affected component
Ivanti Avalanche<=6.3.4.153
Event History
May 9, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2023-28127?
CVE-2023-28127 is a path traversal vulnerability that exists in Avalanche version 6.3.x and below.
2
How does CVE-2023-28127 affect Ivanti Avalanche?
CVE-2023-28127 affects Ivanti Avalanche versions 6.3.x and below, allowing for possible information disclosure.
3
What is the severity of CVE-2023-28127?
CVE-2023-28127 has a severity of 7.5 (High).
4
How can I fix CVE-2023-28127?
To fix CVE-2023-28127, upgrade Ivanti Avalanche to a version above 6.3.x.
5
Where can I find more information about CVE-2023-28127?
More information about CVE-2023-28127 can be found at the following reference: [link](https://forums.ivanti.com/s/article/ZDI-CAN-17769-Ivanti-Avalanche-getLogFile-Directory-Traversal-Information-Disclosure?language=en_US)