CVE-2021-42124CWE-284

An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session…

published December 7, 2021

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02689 · 85.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-12-07T13:12Z
EPSS history
Timeline
  • 07 DEC 13:12Z
    An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session…
    cvelistv5