Directory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated attacker to obtain sensitive information via the javax.faces.resource component.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
History

Fri, 18 Oct 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-06-12T14:38:48.114Z

Reserved: 2023-08-30T00:00:00.000Z

Link: CVE-2023-41474

cve-icon Vulnrichment

Updated: 2024-08-02T19:01:35.445Z

cve-icon NVD

Status : Modified

Published: 2024-01-25T20:15:36.993

Modified: 2025-06-12T15:15:32.130

Link: CVE-2023-41474

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.