CVE-2024-37373

Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE

High · published August 14, 2024

CVSS v3.0
7.2
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE.

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01564 · 75.1th percentile
Published
2024-08-14T02:38Z
EPSS history
Timeline
  • 14 AUG 02:38Z
    Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker with admin rights to achieve RCE
    cvelistv5