Deserialization in Ivanti Avalanche

CVE-2021-42127

A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.

Vulnerability class: Insecure Deserialization

EPSS: 0.540 (98.1th percentile) — read the EPSS interpretation.

Affected products

  • N/a Ivanti Avalanche — versions 6.3.3

Weakness classification (CWE)

References