Non notée
CVE-2021-42124 An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the…
Description
An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ivanti Avalanche | 6.3.3 | Pas de correctif indiqué |
Références
- forums.ivanti.com forums.ivanti.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Ivanti Avalanche
Les 10 CVE de Ivanti Avalanche →
CVE-2022-44574
An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker…
Non notée
CVE-2021-42133
An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to…
Non notée
CVE-2021-42132
A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail…
Non notée
CVE-2021-42131
A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail…
Non notée