Boletines de Vulnerabilidades

CVE-2024-29848

   
Software afectado IVANTI
 
An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2024-29848