CVE-2023-46263

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 19, 2023
Updated: Dec 21, 2023
CWE ID 434

Summary

CVE-2023-46263 is a vulnerability affecting Avalanche versions 6.4.1 and below. This issue permits an unauthenticated attacker to upload a dangerous file type, bypassing restrictions, leading to potential remote code execution. Successful exploitation could result in significant security risks, making it essential for users to update their systems promptly.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Ivanti Avalanche

Affected Vendors

  • Ivanti Software Inc.