CVE-2023-29656

An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena"…

published July 6, 2023

CVSS
—
EPSS
0%
Percentile
18.6
In the wild
Unconfirmed
What it is

An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actions(block/unblock traffic) from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress traffic in the entire infrastructure where darktrace agents are deployed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.6th percentile
Published
2023-07-06T00:00Z
EPSS history
Timeline
  • 06 JUL 00:00Z
    An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena"…
    cvelistv5