Ivanti has released 27 fixes for various reported vulnerabilities in its 2024 first-quarter release. None of the vulnerabilities are being actively exploited, according to the vendor.
The company recommends users download the Avalanche installer and update to the latest version of Avalanche 6.4.3, which will, in turn, apply all the fixes listed in the update.
Each of the vulnerabilities has a CVSS score, ranging from a 4.3, a vulnerability that can allow an authenticated remote attacker to view sensitive information in memory, to a 9.8, a heap overflow vulnerability in the WLAvalancheService part of Avalanche, prior to version 6.4.3, that allows a remote attacker to execute commands without authentication.
Ιβάντι urges its users to ensure that their MSSQL database password is readily available because it does not store the password. Users can download the Avalanche 6.4.3 release through Ιβάντι, along with information on next steps to take.
- SEO Powered Content & PR Distribution. Ενισχύστε σήμερα.
- PlatoData.Network Vertical Generative Ai. Ενδυναμώστε τον εαυτό σας. Πρόσβαση εδώ.
- PlatoAiStream. Web3 Intelligence. Ενισχύθηκε η γνώση. Πρόσβαση εδώ.
- PlatoESG. Ανθρακας, Cleantech, Ενέργεια, Περιβάλλον, Ηλιακός, Διαχείριση των αποβλήτων. Πρόσβαση εδώ.
- PlatoHealth. Ευφυΐα βιοτεχνολογίας και κλινικών δοκιμών. Πρόσβαση εδώ.
- πηγή: https://www.darkreading.com/vulnerabilities-threats/ivanti-releases-fixes-for-more-than-2-dozen-vulnerabilities
