CVE-2023-32311
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
4.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.7%
CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Users are advised to upgrade. There are no known workarounds for this issue.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| fit2cloud:cloudexplorer | fit2cloud cloudexplorer | lt | 1.1.0 |
CNA Affected
[
{
"vendor": "CloudExplorer-Dev",
"product": "CloudExplorer-Lite",
"versions": [
{
"version": "< 1.1.0",
"status": "affected"
}
]
}
]Related
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
4.5 Medium
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.7%