CVE-2023-1779CWE-863

Helmholz and MB Connect Line: Account takeover via password reset in multiple products

Medium · published June 6, 2023

CVSS v3.1
4.3
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited amount of another accounts contact information.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00515 · 43.0th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-06-06T10:07Z
EPSS history
Timeline
  • 06 JUN 10:07Z
    Helmholz and MB Connect Line: Account takeover via password reset in multiple products
    cvelistv5