Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager
60
CVE-2024-29848
- CVSS 3.1
- 7.2 high
- EPSS
- 64%p99
- Published
- ·
- Modified
Description · NVD
An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated, privileged user to execute arbitrary commands as SYSTEM.