The version of Ivanti Avalanche running on the remote host is prior to 6.4.3. It is, therefore, is affected by multiple vulnerabilities :

  - A Heap overflow vulnerability in WLInfoRailService component of Ivanti     Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute arbitrary commands. (CVE-2024-24996)

  - A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote     authenticated attacker to execute arbitrary commands as SYSTEM. (CVE-2024-24997)

  - An Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a     remote authenticated attacker to execute arbitrary commands as SYSTEM. (CVE-2024-23534)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ivanti Avalanche < 6.4.3 Multiple Vulnerabilities

critical Nessus Plugin ID 211473

Version 1.2

Version 1.1

Version 1.2 Nov 18, 2024, 7:31 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv3 score source (set to "CVE-2024-29204") Plugin Feed: 202411180731
Version 1.1 Nov 16, 2024, 12:24 AM New Plugin Feed: 202411160024