Not rated
CVE-2021-42127 A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service…
Description
A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ivanti Avalanche | 6.3.3 | No fix stated |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Ivanti Avalanche
The 10 CVEs of Ivanti Avalanche →
CVE-2022-44574
An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker…
Not rated
CVE-2021-42133
An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to…
Not rated
CVE-2021-42132
A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail…
Not rated
CVE-2021-42131
A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail…
Not rated