CVE-2023-41089CWE-287

Improper Authentication in DEXMA DEXGate

High · published October 19, 2023

CVSS v3.1
8.0
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie header to generate "legitimate" requests.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00638 · 49.9th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-10-19T18:13Z
EPSS history
Timeline
  • 19 OCT 18:13Z
    Improper Authentication in DEXMA DEXGate
    cvelistv5