This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche…
Ivanti · Avalanche
The authentication flaw in Ivanti Avalanche (version 6.3.2.3490) lies in the EnterpriseServer service, where a time-of-check/time-of-use race condition arises from missing locking during authentication operations. A remote attacker with network access and no privileges or user interaction can bypass the existing authentication mechanism on affected installations, which can lead to unauthorized access to the system.
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the EnterpriseServer service. The issue results from the lack of proper locking when performing operations during authentication. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-15528.
- Exploited
- Not confirmed
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
Disclosed on 29 Mar 2023. No public exploit code or confirmed exploitation is recorded.
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.