Ivanti Avalanche Enterprise Service SQL Injection (CVE-2021-42131)

An SQL injection vulnerability exists in the Ivanti Avalanche EnterpriseServer service. The vulnerability is due to insufficient validation of data sent to the EnterpriseServer service...

CVE-2021-42131

Ivanti Avalanche CVE-2021-42131 is an SQL Injection flaw in the Ivanti Avalance EnterpriseServer service (pre-6.3.3) caused by insufficient validation of data sent to the EnterpriseServer. An attacker with access to the Inforail Service can exploit this to escalate privileges. ZDI-21-1302 additio...