CVE-2024-13181

Critical · 9.8

CVSS

9.8

EPSS

33.2%

Published

Jan 14, 2025

CISA due date

—

The record

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.

Affected packages

Ecosystem	Package	Introduced	Fixed