CVE-2021-42127: Critical severity ivanti avalanche vulnerability
A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-42127?
CVE-2021-42127 is a deserialization of untrusted data vulnerability that exists in Ivanti Avalanche before version 6.3.3.
How does CVE-2021-42127 affect Ivanti Avalanche?
CVE-2021-42127 allows arbitrary code execution via the Data Repository Service in Ivanti Avalanche before version 6.3.3.
What is the severity of CVE-2021-42127?
CVE-2021-42127 has a severity rating of critical with a CVSS score of 9.8.
How can I fix CVE-2021-42127?
To fix CVE-2021-42127, it is recommended to upgrade to version 6.3.3 of Ivanti Avalanche.
Where can I find more information about CVE-2021-42127?
You can find more information about CVE-2021-42127 in the Ivanti Avalanche 6.3.3 Security Alert article: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3