CVE-2024-25000: Path Traversal
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25000?
CVE-2024-25000 is classified as a high severity vulnerability due to its potential to allow remote authenticated attackers to execute arbitrary commands as SYSTEM.
How do I fix CVE-2024-25000?
To remediate CVE-2024-25000, upgrade Ivanti Avalanche to version 6.4.3 or later, as this version addresses the vulnerability.
Who is affected by CVE-2024-25000?
Users of Ivanti Avalanche versions prior to 6.4.3 are affected by CVE-2024-25000 due to the path traversal vulnerability.
What types of attacks can be performed through CVE-2024-25000?
CVE-2024-25000 allows remote authenticated attackers to execute arbitrary commands, leading to potential full system compromise.
Is authentication required to exploit CVE-2024-25000?
Yes, an attacker must be authenticated to exploit CVE-2024-25000, making it a targeted vulnerability.