CVE-2023-3066CWE-863

Mobatime mobile application - Broken authorisation

High · published June 5, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
47.3
In the wild
Unconfirmed
What it is

Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administratorsThis issue affects Mobatime mobile application AMXGT100: through 1.3.20.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00587 · 47.3th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-06-05T08:27Z
EPSS history
Timeline
  • 05 JUN 08:27Z
    Mobatime mobile application - Broken authorisation
    cvelistv5