Boletines de Vulnerabilidades

CVE-2024-38653

   
Software afectado IVANTI
 
XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on the server.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2024-38653