high8.8
CVE-2021-42131
A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.
Impact
A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Avalanche | before 6.3.3 |