description: A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.
problem types: Deserialization of Untrusted Data (CWE-502)
affected:
{
product: Ivanti Avalanche
vendor: n/a
versions:
status: affected, version: 6.3.3
}