CVE-2018-8901

—

CVSS 3.0

7.8 high

EPSS

<1%p50

Published

Jun 29, 2018 (Jun 29, 2018)

Modified

Jun 17, 2026

Description

An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. A local user with database access privileges can read the encrypted passwords for users who authenticate via LDAP to Avalanche services. These passwords are stored in the Avalanche databases. This issue only affects customers who have enabled LDAP authentication in their configuration.

Vendors: ivanti
Products: avalanche
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.