CVE-2021-42131 — n/a / Ivanti Avalanche

CVE-2021-42131

n/a / Ivanti Avalanche PUBLISHED

Description (CNA)

A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.

Affected (CNA)

Vendor / product	Versions
n/a / Ivanti Avalanche	affected 6.3.3

CWE

CWE-89

References

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3

ADP enrichment

CVE

No English description supplied.

https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3