CVE-2023-7240CWE-20

Broken Access Control leading to SSRF in NetIQ Identity Console

Medium · published May 7, 2024

CVSS v3.1
5.8
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

An improper authorization level has been detected in the login panel. It may lead to

unauthenticated Server Side Request Forgery and allows to perform open services

enumeration. Server makes query to provided server (Server IP/DNS field) and is

triggering connection to arbitrary address.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00376 · 30.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-05-07T13:11Z
EPSS history
Timeline
  • 07 MAY 13:11Z
    Broken Access Control leading to SSRF in NetIQ Identity Console
    cvelistv5