Non notée
CVE-2021-42127 A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service…
Description
A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ivanti Avalanche | 6.3.3 | Pas de correctif indiqué |
Autres CVE de Ivanti Avalanche
Les 10 CVE de Ivanti Avalanche →
CVE-2022-44574
An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker…
Non notée
CVE-2021-42133
An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to…
Non notée
CVE-2021-42132
A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail…
Non notée
CVE-2021-42131
A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail…
Non notée