CVE-2023-37498 HCL Unica Platform is vulnerable to a privilege escalation by unauthorized group assignation

2023-08-0321:34:23

HCL

raw.githubusercontent.com

cve-2023-37498

hcl unica platform

privilege escalation

unauthorized group assignation

post request

attacker

privileges

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

18.3%

JSON

A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator. It is possible that an attacker could potentially escalate their privileges.