Ivanti Avalanche FileStoreConfig Arbitrary File Upload Remote Code Execution Vulnerability

2024-01-1100:00:00

Anonymous and Lucas Miller of Trend Micro Security Research

www.zerodayinitiative.com

vulnerability

remote execution

ivanti avalanche

filestoreconfig

authentication

code execution

user-supplied data

arbitrary files

system context

AI Score

7.6

Confidence

High

EPSS

0.004

Percentile

75.2%

JSON

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the FileStoreConfig app. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.