What the vulnerability does

01Description

An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploiting the SetUser method or can exploit the Race Condition in the authentication message.

Key dates

02Disclosure timeline

May 9, 2023 CVE published
January 29, 2025 Record updated