Home

Description

Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability

PUBLISHED Reserved 2023-08-31 | Published 2023-11-03 | Updated 2024-09-05 | Assigner hackerone




HIGH: 7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Product status

Default status
unaffected

6.4.1.236 (semver) before 6.4.1.236
affected

References

download.wavelink.com/...lanche_v6.4.1.236_release_notes.txt

cve.org (CVE-2023-41725)

nvd.nist.gov (CVE-2023-41725)

Download JSON