Boletines de Vulnerabilidades

CVE-2024-24995

   
Software afectado IVANTI
 
A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2024-24995