An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker to achieve a remote code execution.
References
Link | Resource |
---|---|
https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Dec 2023, 04:49
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:ivanti:avalanche:*:*:*:*:premise:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
First Time |
Ivanti avalanche
Microsoft windows Ivanti Microsoft |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
CWE | CWE-434 | |
Summary |
|
|
References | () https://download.wavelink.com/Files/avalanche_v6.4.2_release_notes.txt - Release Notes, Vendor Advisory |
19 Dec 2023, 16:17
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-12-19 16:15
Updated : 2023-12-21 04:49
NVD link : CVE-2023-46263
Mitre link : CVE-2023-46263
CVE.ORG link : CVE-2023-46263
JSON object : View
Products Affected
microsoft
- windows
ivanti
- avalanche
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type