Security Advisory Ivanti Avalanche 6.4.7 (Multiple CVEs)

Ivanti has released updates for Ivanti Avalanche which addresses three high severity vulnerabilities. Successful exploitation of CVE-2024-13181 could allow a remote unauthenticated attacker to bypass authentication. CVE-2024-13180 could allow a remote unauthenticated attacker to leak sensitive information. And CVE-2024-13179 could allow a remote unauthenticated attacker to bypass authentication.

We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure.

Vulnerability Details:

CVE Number | Description | CVSS Score (Severity) | CVSS Vector | CWE
—|—|—|—|—
CVE-2024-13181 | Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010. | 7.3 (High) | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | CWE-22, CWE-288
CVE-2024-13180 | Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011. | 7.5 (High) | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | CWE-22
CVE-2024-13179 | Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. | 7.3 (High) | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L | CWE-22, CWE-288

Affected Versions

Product Name | Affected Version(s) | Affected CPE(s) | Resolved Version(s) | Patch Availability
—|—|—|—|—
Ivanti Avalanche | 6.4.6 and prior | cpe:2.3:a:ivanti:avalanche:6.4.6:*:*:*:premise:*:*:* | 6.4.7 | Download Portal

Solution

This release is a full product install. Perform an in-place upgrade as per the product documentation.

Acknowledgements

Ivanti would like to thank the following for reporting the relevant issues and for working with Ivanti to help protect our customers:

* Anonymous working with Trend Micro Zero Day Initiative

Note: Ivanti is dedicated to ensuring the security and integrity of our enterprise software products. We recognize the vital role that security researchers, ethical hackers, and the broader security community play in identifying and reporting vulnerabilities. Visit HERE to learn more about our Vulnerability Disclosure Policy.

FAQ

1. Are you aware of any active exploitation of these vulnerabilities?

We are not aware of any customers being exploited by these vulnerabilities prior to public disclosure. These vulnerabilities were disclosed through our responsible disclosure program.

2. How can I tell if I have been compromised?
Currently, there is no known public exploitation of this vulnerability that could be used to provide a list of indicators of compromise.

3. What should I do if I need help?

If you have questions after reviewing this information, you can log a case and/or request a call via the Success Portal.