writeups.xyz / Riding The Inforail To Exploit Ivanti Avalanche

Submitter : c2a

Date: 19 July 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• Insecure Deserialization
• Race Condition
• Authentication Bypass

Programs :

• Ivanti

Authors :

• Piotr Bazydło (@Chudypb)

Link :
https://www.zerodayinitiative.com/blog/2022/7/19/riding-the-inforail-to-exploit-ivanti-avalanche