CVE-2021-30497

Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed by the /AvalancheWeb/image endpoint is not verified to be within the scope of the image folder, e.g., the attacker can obtain sensitive information via the C:/Windows/system32/config/system.sav value.

• CWE-22

• https://forums.ivanti.com/s/article/Security-Alert-CVE-2021-30497-Directory-Traversal-Vulnerability?language=en_USPatch, Vendor Advisory
• https://help.ivanti.com/wl/help/en_us/aod/5.4/Avalanche/Console/Launching_the_Avalanche.htmVendor Advisory
• https://ssd-disclosure.com/ssd-advisory-ivanti-avalanche-directory-traversal/Exploit, Third Party Advisory
• https://forums.ivanti.com/s/article/Security-Alert-CVE-2021-30497-Directory-Traversal-Vulnerability?language=en_USPatch, Vendor Advisory
• https://help.ivanti.com/wl/help/en_us/aod/5.4/Avalanche/Console/Launching_the_Avalanche.htmVendor Advisory
• https://ssd-disclosure.com/ssd-advisory-ivanti-avalanche-directory-traversal/Exploit, Third Party Advisory

Published

Apr 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30487In the topic moving API in Zulip Server 3.x before 3.4, orga…2.7
• CVE-2021-3049An improper authorization vulnerability in the Palo Alto Net…4.3
• CVE-2021-30490upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 throu…7.8
• CVE-2021-30493Multiple system services installed alongside the Razer Synap…5.5
• CVE-2021-30494Multiple system services installed alongside the Razer Synap…5.5
• CVE-2021-30496The Telegram app 7.6.2 for iOS allows remote authenticated u…5.7
• CVE-2021-30498A flaw was found in libcaca. A heap buffer overflow in expor…7.8
• CVE-2021-30499A flaw was found in libcaca. A buffer overflow of export.c i…7.8
• CVE-2021-3050An OS command injection vulnerability in the Palo Alto Netwo…8.8
• CVE-2021-30500Null pointer dereference was found in upx PackLinuxElf::canU…7.8
• CVE-2021-30501An assertion abort was found in upx MemBuffer::alloc() in me…5.5
• CVE-2021-30502The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell…9.8