CVE-2023-41972CWE-280

Revert password check incorrect type validation

High · published March 26, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled. Fixed Version: Win ZApp 4.3.0.121 and later.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2024-03-26T14:16Z
EPSS history
Timeline
  • 26 MAR 14:16Z
    Revert password check incorrect type validation
    cvelistv5