CVE-2023-41474

Directory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated attacker to obtain sensitive information via the javax.faces.resource component.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2024-01-25

Last modified

2025-06-12

Weaknesses

CWE-22

Affected products

• Avalanche (Ivanti)

References

• https://github.com/JBalanza/CVE-2023-41474