CVE-2021-42125

An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files...

CVE-2021-42125

Summary: CVE-2021-42125 is an unrestricted file upload vulnerability in Ivanti Avalanche, exploitable on versions prior to 6.3.3 when an attacker with access to the Inforail/ FileStore flow can write dangerous files. The Red Hat/NVD entries duplicate the issue description. ZDI’s advisory adds tha...