PT-2021-5240

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.3.3 Description The issue is related to a deserialization of untrusted data vulnerability in the StatServer service of Ivanti Avalanche. This vulnerability can be exploited by a remote attacker to execute...

PT-2021-5374

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.3.3 Description A command injection vulnerability exists in Ivanti Avalanche, allowing an attacker with access to the Inforail Service to perform arbitrary command execution. The issue is related to...

PT-2021-5375

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.3.3 Description A deserialization of untrusted data issue exists, allowing an attacker with access to the Inforail Service to perform arbitrary code execution by sending specially crafted data. This can be...

PT-2021-5030

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.3.3 Description The issue is related to insufficient input data sanitization in the implementation of the runAgentRestarter method in the Ivanti Avalanche mobile device management system. This can be...