CVE-2023-4997CWE-863

Improper authorisation in Uptime DC

High · published October 4, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

Improper authorisation of regular users in ProIntegra Uptime DC software (versions below 2.0.0.33940) allows them to change passwords of all other users including administrators leading to a privilege escalation.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-10-04T10:54Z
EPSS history
Timeline
  • 04 OCT 10:54Z
    Improper authorisation in Uptime DC
    cvelistv5