CVE-2024-29848

An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary…

High · published May 31, 2024

Patch now

High probability of exploitation

CVSS calls it high at 7.2. It sits in the 99.2th percentile for exploit probability.

CVSS v3.0

7.2

EPSS

64%

Percentile

99.2

In the wild

Unconfirmed

What it is

An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM.

The record

Technical detail

CVSS v3.0: 7.2 · HIGH
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.64423 · 99.2th percentile
Published: 2024-05-31T17:38Z

EPSS history

Timeline

31 MAY 17:38Z
An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary…
cvelistv5