CVE-2023-28126

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message...

CVE-2023-28126

CVE-2023-28126 affects Ivanti Avalanche versions 6.3.x and below. The vulnerability enables authentication bypass via the SetUser method or a race condition in the authentication message. Related disclosures cite that the GetSettings path exposes dangerous functionality to unprivileged users, ena...