Unscored CVE-2021-42129 EUVD-2021-29114GHSA-qjpp-82mc-9gw6

A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform…

Published Dec 7, 2021 · Updated Aug 4, 2024 · Assigned by hackerone

Description

A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.

Affected products

Vendor	Product	Affected	Fixed
—	Ivanti Avalanche	6.3.3	—

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3