CVE-2023-28125 — n/a / Avalanche

Description (CNA)

An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access to the server by registering to receive messages from the server and perform an authentication bypass.

Affected (CNA)

Vendor / product	Versions
n/a / Avalanche	affected Avalanche Premise versions 6.3.x and below

CWE

CWE-287

References

https://forums.ivanti.com/s/article/ZDI-CAN-17729-CVE-2023-28125-Bug-958437-ZDI-CAN-17729-Ivanti-Avalanche-InfoRail-Authentication-Bypass-Vulnerability?language=en_US

ADP enrichment

CVE

No English description supplied.

https://forums.ivanti.com/s/article/ZDI-CAN-17729-CVE-2023-28125-Bug-958437-ZDI-CAN-17729-Ivanti-Avalanche-InfoRail-Authentication-Bypass-Vulnerability?language=en_US

CISA-ADP

No English description supplied.

No references supplied.