Unscored CVE-2021-42127 EUVD-2021-29112GHSA-5cxv-f998-83v8

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code exec…

Published Dec 7, 2021 · Updated Aug 4, 2024 · Assigned by hackerone

Description

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.

Affected products

Vendor	Product	Affected	Fixed
—	Ivanti Avalanche	6.3.3	—

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3