CVE-2024-37403

Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability

Medium · published August 7, 2024

CVSS v3.0
5.0
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to properly sanitize file names, resulting in a path traversal-affiliated vulnerability. This potentially enables other malicious apps on the device to read sensitive information stored in the app root.

The record
Technical detail
CVSS v3.0
5.0 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00459 · 38.8th percentile
Published
2024-08-07T03:54Z
EPSS history
Timeline
  • 07 AUG 03:54Z
    Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability
    cvelistv5