CVE-2023-47316

2023-11-2200:00:00

mitre

www.cve.org

headwind mdm

access control

vulnerability

api calls

file management

audit-related

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to potentially sensitive API calls such as listing users and their data, file management API calls and audit-related API calls.

References

boltonshield.com/en/cve/cve-2023-47316/