VULNERABILITY INTELLIGENCE

CVE-2023-28126

CVSS score5.9 MEDIUM
EPSS probability66.66%
CISA KEVNot currently listed
Published2023-05-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.

Weakness classification

  • CWE-305: Authentication Bypass by Primary Weakness
  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references