CVE-2023-5913

2023-11-0817:15:08

CWE-266

[email protected]

web.nvd.nist.gov

incorrect privilege assignment

opentext fortify scancentral dast

vulnerability

elevated privileges

version 21.1

version 21.2.1

version 22.2

version 23.1

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

39.1%

JSON

Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.

Affected configurations

Nvd

Node

microfocusfortify_scancentral_dastMatch21.1

microfocusfortify_scancentral_dastMatch21.2

microfocusfortify_scancentral_dastMatch21.2.1

microfocusfortify_scancentral_dastMatch22.1

microfocusfortify_scancentral_dastMatch22.1.1

microfocusfortify_scancentral_dastMatch22.2

microfocusfortify_scancentral_dastMatch23.1

VendorProductVersionCPE
microfocusfortify_scancentral_dast21.1cpe:2.3:a:microfocus:fortify_scancentral_dast:21.1:*:*:*:*:*:*:*
microfocusfortify_scancentral_dast21.2cpe:2.3:a:microfocus:fortify_scancentral_dast:21.2:*:*:*:*:*:*:*
microfocusfortify_scancentral_dast21.2.1cpe:2.3:a:microfocus:fortify_scancentral_dast:21.2.1:*:*:*:*:*:*:*
microfocusfortify_scancentral_dast22.1cpe:2.3:a:microfocus:fortify_scancentral_dast:22.1:*:*:*:*:*:*:*
microfocusfortify_scancentral_dast22.1.1cpe:2.3:a:microfocus:fortify_scancentral_dast:22.1.1:*:*:*:*:*:*:*
microfocusfortify_scancentral_dast22.2cpe:2.3:a:microfocus:fortify_scancentral_dast:22.2:*:*:*:*:*:*:*
microfocusfortify_scancentral_dast23.1cpe:2.3:a:microfocus:fortify_scancentral_dast:23.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microfocus	fortify_scancentral_dast	21.1	cpe:2.3:a:microfocus:fortify_scancentral_dast:21.1:::::::*
microfocus	fortify_scancentral_dast	21.2	cpe:2.3:a:microfocus:fortify_scancentral_dast:21.2:::::::*
microfocus	fortify_scancentral_dast	21.2.1	cpe:2.3:a:microfocus:fortify_scancentral_dast:21.2.1:::::::*
microfocus	fortify_scancentral_dast	22.1	cpe:2.3:a:microfocus:fortify_scancentral_dast:22.1:::::::*
microfocus	fortify_scancentral_dast	22.1.1	cpe:2.3:a:microfocus:fortify_scancentral_dast:22.1.1:::::::*
microfocus	fortify_scancentral_dast	22.2	cpe:2.3:a:microfocus:fortify_scancentral_dast:22.2:::::::*
microfocus	fortify_scancentral_dast	23.1	cpe:2.3:a:microfocus:fortify_scancentral_dast:23.1:::::::*