What’s Vulnerable › Vulnerabilities
CVE-2018-8902
- Severity: medium (CVSS 6.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-06-29 · updated 2026-06-17
- Weakness: CWE-287
Description
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include Wi-Fi passwords. This discovered key can be used for all instances of the product.
Affected products
- Ivanti Avalanche: from 5.3 through 6.2
References
Get alerted when CVE-2018-8902 or the next vulnerability affects your stack