description: An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write.
problem types: Unrestricted Upload of File with Dangerous Type (CWE-434)
affected:
{
product: Ivanti Avalanche
vendor: n/a
versions:
status: affected, version: 6.3.3
}