CVE-2021-42131

A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation...

CVE-2021-42131

A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation...

Sql injection

A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation...

CVE-2021-42131

Ivanti Avalanche CVE-2021-42131 is an SQL Injection flaw in the Ivanti Avalance EnterpriseServer service (pre-6.3.3) caused by insufficient validation of data sent to the EnterpriseServer. An attacker with access to the Inforail Service can exploit this to escalate privileges. ZDI-21-1302 additio...