CVE-2024-47008

CVE-2024-47008 is a server-side request forgery (SSRF, CWE-918) flaw in Ivanti Avalanche, an enterprise mobile device management platform for ruggedized and mobile devices, affecting versions before 6.4.5. A remote, unauthenticated attacker can trigger the flaw over the network by sending a crafted request that causes the Avalanche server to issue requests to attacker-controlled or internal resources. Successful exploitation allows the attacker to leak sensitive information from the server or the internal network, with high confidentiality impact but no integrity or availability impact per the CVSS vector. Organizations running any Ivanti Avalanche release prior to 6.4.5 are affected. No public proof-of-concept, KEV listing, or confirmed in-the-wild exploitation is known, but the high EPSS score (47.1% within 30 days, 99th percentile) indicates an elevated likelihood of exploitation in the near term.

What to do: Upgrade Ivanti Avalanche to version 6.4.5 or later. Until patched, restrict access to the Avalanche console to trusted networks or VPN access, apply egress filtering from the server to limit SSRF reach, and review outbound request logs for signs of SSRF probing. Verify whether any Avalanche instances are exposed to the internet and remediate that exposure first.