CVE-2021-42127

CVE-2021-42127 affects Ivanti Avalanche before 6.3.3, where deserialization of untrusted data via the Inforail Service (Data Repository Service) allows arbitrary code execution. The Red Hat/NVD/CVE pages corroborate the vulnerability description across multiple feeds. The issue manifests in the I...

CVE-2021-42126

CVE-2021-42126 affects Ivanti Avalanche, prior to version 6.3.3. The issue is described as an improper authorization control that allows an attacker with access to the Inforail Service to perform privilege escalation. Several connected sources confirm this vulnerability and point to a fixed relea...

CVE-2021-42126

An improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation...

CVE-2021-42125

Summary: CVE-2021-42125 is an unrestricted file upload vulnerability in Ivanti Avalanche, exploitable on versions prior to 6.3.3 when an attacker with access to the Inforail/ FileStore flow can write dangerous files. The Red Hat/NVD entries duplicate the issue description. ZDI’s advisory adds tha...

CVE-2021-42125

An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files...

CVE-2021-42124

Ivanti Avalanche is affected prior to 6.3.3 by an improper access control vulnerability that can enable a session takeover when an attacker has access to the Inforail Service. The issue is evidenced across multiple sources: CVE-2021-42124 describes the vulnerability in Ivanti Avalanche before 6.3...

CVE-2021-42124

An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover...

Ivanti Avalanche 代码问题漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche that could be exploited by an attacker to perform arbitrary fil...

Ivanti Avalanche SQL注入漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. Ivanti Avalance suffers from a SQL injection vulnerability that stems from a lack of validation of externally enter...

CVE-2021-42131: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation...

CVE-2021-42129: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution...

CVE-2021-42125: Deserialization of Untrusted Data

An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files...

CVE-2021-42132: Improper Neutralization of Special Elements used in a Command

A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution...

CVE-2021-42126: Improper Authorization

An improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation...

CVE-2021-42133: Unrestricted Upload of File with Dangerous Type

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write...

Ivanti Avalanche 代码问题漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche that allows an attacker to exploit the vulnerability to upload...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche that could be exploited by an attacker with access to inail...

CVE-2021-42124: Improper Access Control

An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover...

Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche that could be exploited by an attacker accessing inail Service ...

CVE-2021-42130: Deserialization of Untrusted Data

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary code execution...