CVE-2021-42124 — n/a / Ivanti Avalanche

CVE-2021-42124

n/a / Ivanti Avalanche PUBLISHED

Description (CNA)

An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover.

Affected (CNA)

Vendor / product	Versions
n/a / Ivanti Avalanche	affected 6.3.3

CWE

CWE-284

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3

ADP enrichment

CVE

No English description supplied.

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3