← Database

CVE-2021-42130

HIGH CVSS: 8.8 Published: 2021-12-07 Modified: 2026-06-17

Description

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary code execution.

Affected Platforms

Ivanti Avalanche

Weakness Type

CWE-502, CWE-502

References