Unscored CVE-2021-42124 EUVD-2021-29109GHSA-jcr9-6f4v-3f68

An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to …

Published Dec 7, 2021 · Updated Aug 4, 2024 · Assigned by hackerone

Description

An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover.

Affected products

Vendor	Product	Affected	Fixed
—	Ivanti Avalanche	6.3.3	—

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3