Unscored CVE-2021-42132 EUVD-2021-29117GHSA-j2pv-v7wm-5hcj

A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform…

Published Dec 7, 2021 · Updated Aug 4, 2024 · Assigned by hackerone

Description

A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.

Affected products

Vendor	Product	Affected	Fixed
—	Ivanti Avalanche	6.3.3	—

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3