CVE-2022-36975 - CVE House
Back to Database
Status published Critical CVE-2022-36975

This vulnerability allows remote attackers to bypass authentication on affected...

Vulnerability Description

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-15332.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-36975

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Piotr Bazydlo (@chudypb)

References

More from Ivanti

View All →
CVE-2025-9872
Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3...
High 8.8
CVE-2025-9713
Path traversal in Ivanti Endpoint Manager before version 2024 SU4...
High 8.8
CVE-2025-9712
Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3...
High 8.8
CVE-2025-8712
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2,...
Medium 5.4
CVE-2025-8711
CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti...
Medium 5.4

Affected Vendor

Affected Software

Avalanche
Vulnerable Versions:
6.3.2.3490

Timeline

Official Publish: March 29th, 2023
Last Modified: February 18th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1213.006 Databases
Collection
T1485 Data Destruction
Impact