CVE-2021-42130

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary code execution.

Score

CVSS 3.1 8.8 High

Status

Modified - support@hackerone.com

Published

2021-12-07

Last modified

2024-08-04

Weaknesses

CWE-502

Affected products

• Avalanche (Ivanti)

References

• https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3