description: An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover.
problem types: Improper Access Control - Generic (CWE-284)
affected:
{
product: Ivanti Avalanche
vendor: n/a
versions:
status: affected, version: 6.3.3
}