CVE-2023-47022

2024-02-0600:00:00

mitre

www.cve.org

cve-2023-47022

ncr terminal handler

unprivileged user

edit audit logs

csv injection

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.3%

JSON

Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lead to CSV injection.

References

github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47022