Description
A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Ivanti Avalanche | 6.3.3 | — |
Unscored
CVE-2021-42131
EUVD-2021-29116GHSA-4gvv-82j8-4qwx
A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform priv…
Published Dec 7, 2021 · Updated Aug 4, 2024 · Assigned by hackerone