CVE-2021-42129 — n/a / Ivanti Avalanche

CVE-2021-42129

n/a / Ivanti Avalanche PUBLISHED

Description (CNA)

A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.

Affected (CNA)

Vendor / product	Versions
n/a / Ivanti Avalanche	affected 6.3.3

CWE

CWE-77

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3

ADP enrichment

CVE

No English description supplied.

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3