CVE-2023-23911CWE-284

An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the…

published March 10, 2023

CVSS
—
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.1th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-03-10T00:00Z
EPSS history
Timeline
  • 10 MAR 00:00Z
    An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the…
    cvelistv5