VYPR
← All advisories
Medium severity5.9NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026

CVE-2023-28126

CVE-2023-28126

Description

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.

Affected products

3
  • Ivanti/Avalanche2 versions
    cpe:2.3:a:ivanti:avalanche:*:*:*:*:premise:*:*:*+ 1 more
    • cpe:2.3:a:ivanti:avalanche:*:*:*:*:premise:*:*:*range: <=6.3.4.153
    • (no CPE)range: <=6.3.x
  • Avalanche/Avalanchedescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.