CVE-2023-23568CWE-285

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields

Medium · published July 25, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
23.1
In the wild
Unconfirmed
What it is

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields.

This issue affects Command Centre: vEL

8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2),

vEL8.70 prior to

vEL8.70.2185 (MR4),

vEL8.60 prior to

vEL8.60.2347 (MR6),

vEL8.50 prior to

vEL8.50.2831 (MR8), all versions

vEL8.40 and prior

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00314 · 23.1th percentile
Weakness
CWE-285 · Improper Authorization
Published
2023-07-25T01:31Z
EPSS history
Timeline
  • 25 JUL 01:31Z
    Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields
    cvelistv5