CVE-2022-44574

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port.

Score

CVSS 3.1 7.5 High

Status

Modified - support@hackerone.com

Published

2023-03-10

Last modified

2025-02-28

Weaknesses

CWE-287

Affected products

• Avalanche (Ivanti)

References

• https://forums.ivanti.com/s/article/Avalanche-ZDI-CAN-19513-Security-Advisory?language=en_US