CVE-2023-28125

An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access to the server by registering to receive messages from the server and perform an authentication bypass...

CVE-2023-28125

CVE-2023-28125 affects Avalanche Premise 6.3.x and earlier; the issue is in the InfoRail authentication flow, enabling an authentication bypass by registering to receive messages from the server. The ZDI advisory notes the vulnerability allows remote authentication bypass and requires user intera...

ZDI-CAN-17729 - CVE-2023-28125 - Bug 958437: ZDI-CAN-17729: Ivanti Avalanche InfoRail Authentication Bypass Vulnerability

Last Modified Date 2024-3-8 16:51:05...