CVE-2023-51650CWE-862

Unauthorized access vulnerability on three interfaces

High · published December 22, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces. This could result in disclosure of sensitive server information. Version 1.4.1 fixes this issue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00865 · 58.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-12-22T20:56Z
EPSS history
Timeline
  • 22 DEC 20:56Z
    Unauthorized access vulnerability on three interfaces
    cvelistv5