CVE-2023-30954CWE-285

Gotham Video Broken Authentication

Low · published November 15, 2023

CVSS v3.1
2.7
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/CR:H
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.5th percentile
Weakness
CWE-285 · Improper Authorization
Published
2023-11-15T19:43Z
EPSS history
Timeline
  • 15 NOV 19:43Z
    Gotham Video Broken Authentication
    cvelistv5