description: A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.
problem types: Command Injection - Generic (CWE-77)
affected:
{
product: Ivanti Avalanche
vendor: n/a
versions:
status: affected, version: 6.3.3
}