CVE-2024-23527

Publication date

2024-04-24 23:12:51

Family

hackerone

State

PUBLISHED

Description

An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditions can allow an unauthenticated remote attacker to read sensitive information in memory.