VULNERABILITY INTELLIGENCE

CVE-2023-28125

CVSS score5.9 MEDIUM
EPSS probability2.25%
CISA KEVNot currently listed
Published2023-05-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access to the server by registering to receive messages from the server and perform an authentication bypass.

Weakness classification

  • support@hackerone.com: CWE-287
  • nvd@nist.gov: CWE-362

Primary references