CVE-2023-3127CWE-287

Improper Authentication in iSTAR

High · published July 11, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
46.0
In the wild
Unconfirmed
What it is

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00562 · 46.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-07-11T21:06Z
EPSS history
Timeline
  • 11 JUL 21:06Z
    Improper Authentication in iSTAR
    cvelistv5