CVE-2023-5830CWE-287

ColumbiaSoft Document Locator WebTools login improper authentication

High · published October 27, 2023

Patch now

High probability of exploitation

CVSS calls it high at 7.3. It sits in the 99.2th percentile for exploit probability.

CVSS v3.1
7.3
EPSS
61%
Percentile
99.2
In the wild
Unconfirmed
What it is

A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation of the argument Server leads to improper authentication. It is possible to initiate the attack remotely. Upgrading to version 7.2 SP4 and 2021.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-243729 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.60782 · 99.2th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-10-27T20:31Z
EPSS history
Timeline
  • 27 OCT 20:31Z
    ColumbiaSoft Document Locator WebTools login improper authentication
    cvelistv5