Unscored CVE-2021-42128 EUVD-2021-29113GHSA-mfmh-5798-r2wm

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via …

Published Dec 7, 2021 · Updated Aug 4, 2024 · Assigned by hackerone

Description

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service.

Affected products

Vendor	Product	Affected	Fixed
—	Ivanti Avalanche	6.3.3	—

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3