Ivanti Product Security Update Advisory
Overview
We have released a security update to fix vulnerabilities in Ivanti products. users of affected products are advised to update to the latest version.
Affected Products
Ivanti Avalanche prior to 6.4.3
Resolved Vulnerabilities
A heap overflow vulnerability in the WLAvalancheService component in Ivanti Avalanche could allow an unauthenticated attacker to execute arbitrary commands (CVE-2024-29204)
Vulnerability Patches
Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
Ivanti Avalanche version 6.4.3
Referenced Sites
[1] Avalanche 6.4.3 Security Hardening and CVEs addressed