The vulnerability of the mapShare method implementation in the mobile device management system Avalanche allows a hacker to execute arbitrary commands.

The vulnerability of the mapShare method in the Avalanche mobile device management system is related to insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted data...

Ivanti Avalanche MapShare Service Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the mapShare method. The...

PT-2021-5374

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.3.3 Description A command injection vulnerability exists in Ivanti Avalanche, allowing an attacker with access to the Inforail Service to perform arbitrary command execution. The issue is related to...