CVE-2021-42133
07.12.2021, 14:15
An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ivanti | avalanche | 𝑥 < 6.3.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-434 - Unrestricted Upload of File with Dangerous TypeThe software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.
- CWE-829 - Inclusion of Functionality from Untrusted Control SphereThe software imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.