Lucene search
MitreCVE-2023-46449HistoryOct 26, 2023 - 3:15 p.m.
CVE-2023-46449
2023-10-2615:15:09
CWE-732
mitre
web.nvd.nist.gov
26
sourcecodester
inventory management
v1.0
incorrect access control
vulnerability
nvd
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
22.8%
Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbitrary user can change the password of another user and takeover the account via IDOR in the password change function.
Affected configurations
Node
mayurikinventory_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mayurik | inventory_management_system | 1.0 | cpe:2.3:a:mayurik:inventory_management_system:1.0:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2023-10-26 15:15:00
cvelist
cvelist
CVE-2023-46449
2023-10-26 00:00:00
nvd
nvd
CVE-2023-46449
2023-10-26 15:15:09
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
8.7
Confidence
High
EPSS
0.001
Percentile
22.8%
Related for CVE-2023-46449