CVE-2023-30955CWE-602

Foundry workspace-server Developer Mode Authorization Bypass

Medium · published June 29, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
30.0
In the wild
Unconfirmed
What it is

A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fix was deployed with workspace-server 7.7.0.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00372 · 30.0th percentile
Weakness
CWE-602 · Client-Side Enforcement of Server-Side Security
Published
2023-06-29T18:46Z
EPSS history
Timeline
  • 29 JUN 18:46Z
    Foundry workspace-server Developer Mode Authorization Bypass
    cvelistv5