CVE-2024-47010

CVE-2024-47010 is a critical path traversal vulnerability in Ivanti Avalanche versions prior to 6.4.5, allowing remote unauthenticated attackers to bypass authentication. With a CVSS score of 9.8, this flaw presents a severe risk due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community attention and media coverage, indicating a high level of awareness. Organizations using affected Ivanti Avalanche versions should prioritize patching to mitigate this critical risk.