← voltar
CVE-2023-28126

CVE-2023-28126

CVSS 5.9 MEDIUMEPSS 66.7%CWE-305CWE-362
An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
n/a · Avalanche

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://forums.ivanti.com/s/article/ZDI-CAN-17750-Ivanti-Avalanche-EnterpriseServer-GetSettings-Exposed-Dangerous-Method-Authentication-Bypass-Vulnerability?language=en_US