PT-2024-4020 · Ivanti · Ivanti Avalanche

Published 2024-04-24 · Updated 2025-05-06 · CVE-2024-29848

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Ivanti Avalanche versions prior to 6.4.x

Description: The issue is related to an unrestricted file upload vulnerability in the web component of Ivanti Avalanche. This vulnerability allows an authenticated, privileged user to execute arbitrary commands as SYSTEM. It can be exploited by a remote attacker to execute arbitrary code by uploading a specially crafted file.

Recommendations: For versions prior to 6.4.x, update to version 6.4.x or later to resolve the issue. As a temporary workaround, consider restricting file uploads to only necessary and validated files to minimize the risk of exploitation. Restrict access to the FileStoreConfig component to minimize the risk of exploitation. Avoid using the FileStoreConfig component until the issue is resolved.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2024-04453

CVE-2024-29848

ZDI-24-504

Affected Products

Ivanti Avalanche

References · 9

• https://forums.ivanti.com/s/article/Avalanche-6-4-3-602-additional-security-hardening-and-CVE-fixed?language=en_US · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-24-504 · Security Note
• https://forums.ivanti.com/s/article/Security-Advisory-May-2024 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04453 · Security Note
• https://osv.dev/vulnerability/CVE-2024-29848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29848 · Security Note
• https://t.me/cvenotify/120992 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024052214 · Note
• https://forums.ivanti.com/s/article/Security-Advisory-May-2024?language=en_US · Note