CVE-2023-46266: Critical severity ivanti avalanche vulnerability
Published Dec 19, 2023
·Updated
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.
Affected Software
1 affected component
Ivanti Avalanche<=6.4.1
Event History
Dec 19, 2023
CVE Published
03:43 PM
Data Sourced
03:43 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-46266?
CVE-2023-46266 has been classified as a moderate severity vulnerability due to its potential to leak sensitive data and cause resource-based DoS attacks.
2
How do I fix CVE-2023-46266?
To mitigate CVE-2023-46266, update Ivanti Avalanche to version 6.4.2 or later.
3
What systems are affected by CVE-2023-46266?
CVE-2023-46266 affects Ivanti Avalanche versions up to and including 6.4.1.
4
What type of attack can exploit CVE-2023-46266?
An attacker can exploit CVE-2023-46266 by sending a specially crafted request that may lead to data leakage or a resource-based DoS.
5
Is there a workaround for CVE-2023-46266 besides updating?
Currently, the recommended mitigation for CVE-2023-46266 is to upgrade the software, and no specific workarounds have been provided.