CVE-2023-28126

Name of the Vulnerable Software and Affected Versions Avalanche versions 6.3.x and below

Description An authentication bypass issue exists that could allow an attacker to gain access by exploiting the SetUser method or by exploiting a Race Condition in the authentication message.

Recommendations For Avalanche versions 6.3.x and below, consider disabling the SetUser method until a patch is available to prevent exploitation of the authentication bypass vulnerability. Restrict access to authentication messages to minimize the risk of exploiting the Race Condition. At the moment, there is no information about a newer version that contains a fix for this vulnerability.