CVE-2022-44574 - AskarLabs CVE Database

CVE-2022-44574

Vendor N/A

Product Ivanti Avalanche

Weakness CWE-287 · Improper authentication

Published March 10, 2023

Last update February 28, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port.

Key dates

02Disclosure timeline

March 10, 2023 CVE published

February 28, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-44574 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

04Related CVE

CVE-2024-0130 CVE-2021-25445 CVE-2023-25559 System account impersonation in DataHub CVE-2026-4664 Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter CVE-2026-28471 OpenClaw 2026.1.14-1 < 2026.2.2 - Allowlist Bypass via displayName and Cross-Homeserver localpart Matching in Matrix Plugin