Description
An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write.
Scores
CVSS v3
8.1
EPSS
0.1440
EPSS Percentile
94.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Details
CWE
CWE-829
CWE-434
Status
published
Products (1)
ivanti/avalanche
< 6.3.3
Published
Dec 07, 2021
Tracked Since
Feb 18, 2026