by Kastro
Paper/Archive/CVE-2021-42128

CVE-2021-42128

hackerone — An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation vi…

EPSS 5%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 91.7.917 × 2018.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service.

Affected

ProductAffectedFixed inSource
Ivanti Avalanche6.3.3–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refforums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3