Vulnerabilities

TI-2023-22141 CVE-2023-41726 · GHSA-7gmv-4hrv-rx2g

Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability

LOW 37

Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00561 Published 2023-11-03 Fixed in 6.4.1.236 CWE-276

TI-2023-22140 CVE-2023-41725 · GHSA-86mf-ppj7-v533

LOW 37

Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00644 Published 2023-11-03 Fixed in 6.4.1.236 CWE-434

TI-2022-21334 CVE-2022-43554 · GHSA-r995-f564-q2hg

LOW 36

Ivanti Avalanche Smart Device Service Missing Authentication Local Privilege Escalation Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00454 Published 2023-11-03 Fixed in 6.4.1.236 CWE-306

TI-2022-21335 CVE-2022-43555 · GHSA-c8wx-9w26-pqw7

LOW 36

Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00454 Published 2023-11-03 Fixed in 6.4.1.236 CWE-306