technology

Ivanti Fixes Two Critical Flaws in Avalanche MDM Solution

Read Insight

Apr 19, 2024 — 1 min read

Ivanti has patched two critical vulnerabilities in its Avalanche mobile device management (MDM) solution that could lead to remote command execution. The two flaws, tracked as CVE-2024-24996 and CVE-2024-29204, both allow unauthenticated remote attackers to execute arbitrary commands. The former vulnerability has a CVSS score of 9.8 and exists in the WLInfoRailService component, while the latter, also with a CVSS score of 9.8, is found in the WLAvalancheService component. Ivanti recommends updating to version 6.4.3 of Avalanche to address these vulnerabilities.

No attacks in the wild have been discovered exploiting these vulnerabilities at this time. However, Ivanti advised that the issue was addressed in Avalanche 6.4.3. Downloads for the latest version of Avalanche can be found on the Ivanti website. Stay updated on all things security with our weekly SecureWeek newsletter!

Ivanti continues to investigate and address other vulnerabilities in its MDM solution, recommending that users update to the latest version to prevent exploitation by malicious actors. These include denial of service conditions, remote code execution, and reading sensitive information from memory.

Stay tuned to Security Affairs for more updates on Ivanti's security research and trends in the cybersecurity landscape.

The Cass Review: Four Claims Trans Advocates Can't Afford to Make Anymore

The largest review to date of transgender health and gender dysphoria concludes that gender dysphoria in childhood does not predict lifelong experience. The review also concludes that puberty blockers don't merely 'buy time', but may change the trajectory of psychosexual and gender identity development, and that

Oppenheimer Quote of the Week: Climate Change Edition

The quote of the week comes from J. Robert Oppenheimer, speaking truth to power nearly 60 years ago. This week's news roundup discusses the lecture given by Dr. Judith Curry to the Global Warming Policy Foundation and her views on the intersection of science and policy in the

Sweetgreen adds steak to menu, aims to boost dinner sales, expand customer base

Sweetgreen, known for its salads and healthier offerings, has added steak to its menu for the first time ever, marking the company's first foray into red meat. The new protein option, caramelized garlic steak, debuted on Tuesday as part of three set entrées and can also be customized

'Jaws' Actress Susan Backlinie, 77, Dies of Heart Attack at Home

Susan Backlinie, the actress who famously played the victim of the shark attack in the 1975 film Jaws, passed away on Saturday morning at her home in southern California. Backlinie's husband told TMZ that the actress died of a heart attack at the age of 77, and that

Read more

The Cass Review: Four Claims Trans Advocates Can't Afford to Make Anymore

Oppenheimer Quote of the Week: Climate Change Edition

Sweetgreen adds steak to menu, aims to boost dinner sales, expand customer base

'Jaws' Actress Susan Backlinie, 77, Dies of Heart Attack at Home