PT-2022-23726 · Ivanti · Ivanti Avalanche

Chudypb + 1 · Published 2022-05-26 · Updated 2023-04-06 · CVE-2022-36982

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche version 6.3.3.101

Description This issue allows remote attackers to read arbitrary files on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can be bypassed. The specific flaw exists within the AgentTaskHandler class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this issue to disclose stored session cookies, leading to further compromise.

Recommendations For Ivanti Avalanche version 6.3.3.101, consider disabling the AgentTaskHandler class until a patch is available to prevent exploitation. Restrict access to sensitive files and directories to minimize the risk of arbitrary file reading. Ensure proper validation of user-supplied paths in file operations to prevent directory traversal attacks. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-36982

ZDI-22-787

Affected Products

Ivanti Avalanche

References · 5

• https://zerodayinitiative.com/advisories/ZDI-22-787 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36982 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36982 · Security Note
• https://download.wavelink.com/Files/avalanche_v6.3.4_release_notes.txt · Note
• https://t.me/cibsecurity/61099 · Telegram Post