CVE-2018-8902

An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2

published June 29, 2018

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include Wi-Fi passwords. This discovered key can be used for all instances of the product.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01742 · 77.4th percentile
Published
2018-06-29T15:00Z
EPSS history
Timeline
  • 29 JUN 15:00Z
    An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2
    cvelistv5