ZDI-24-376: Ivanti Avalanche WLInfoRailService Integer Overflow Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information or create a denial-of-service condition on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-23531.

attackers authentication avalanche cve cve-2024 cves cvss disclosure exploit information information disclosure information disclosure vulnerability integer integer overflow ivanti ivanti avalanche overflow rating sensitive sensitive information service vulnerability zdi