CVE-2021-42133

Summary

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write.

Affected Software

Weaknesses

• CWE-434: Unrestricted Upload of File with Dangerous Type (CWE-434)

ADP Enrichment

CVE Program Container

Additional References

• https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3

References

• https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3

• ←Previous
• Next→