CVE-2021-42133CWE-434

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an…

published December 7, 2021

CVSS
—
EPSS
3%
Percentile
86.8
In the wild
Unconfirmed
What it is

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02898 · 86.8th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2021-12-07T13:13Z
EPSS history
Timeline
  • 07 DEC 13:13Z
    An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an…
    cvelistv5