CVE-2024-27976
Published: 19 April 2024
Summary
CVE-2024-27976 is a high-severity Path Traversal (CWE-22) vulnerability in Ivanti Avalanche. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 7.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-27976 is a path traversal vulnerability, tracked as CWE-22, that affects the web component of Ivanti Avalanche versions prior to 6.4.3. The flaw received a CVSS 3.1 base score of 8.8 and permits unauthorized access to restricted paths on the affected system.
A remote attacker who already possesses valid credentials can leverage the vulnerability to traverse directories and execute arbitrary commands with SYSTEM-level privileges on the target server.
Ivanti has released version 6.4.3 to resolve the issue, accompanied by a security hardening bulletin that lists the CVE among the addressed defects and directs customers to apply the update.
The EPSS score has remained steady at 0.0902 with no observed increase since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-25150
Vulnerability details
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Validates pathnames and filenames to prevent traversal outside intended directories.