CVE-2021-42131

Summary

A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.

Affected Software

VendorProductVersion RangeStatus
n/aIvanti Avalanche6.3.3affected

Weaknesses

  • CWE-89: SQL Injection (CWE-89)

ADP Enrichment

CVE Program Container

Additional References

References