CVE-2024-47010

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22CWE-288

Affected software

No affected versions have been published.

Timeline

Published
Oct 8, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-470117.5Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive informationCVE-2024-470127.8In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could CVE-2024-470137.8In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This could lead to local eCVE-2024-470148.8Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.CVE-2024-470155.5In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds cCVE-2024-470167.8there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additionCVE-2024-470177.8In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation oCVE-2024-470185.5In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. This could lead to localCVE-2024-470195.5In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. ThCVE-2024-47025.4The Mega Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in all versions up to, anCVE-2024-470207.5Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.CVE-2024-470217.5In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to re
CVE-2024-47010: Critical severity, CVSS 9.8 | Vulnix