Lucene search
GoogleOSV:CVE-2023-3286HistoryJul 09, 2024 - 11:15 a.m.
CVE-2023-3286
2024-07-0911:15:12
Google
osv.dev
1
bola vulnerability
post request
unauthorized user creation
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
AI Score
6.7
Confidence
Low
A BOLA vulnerability in POST /secretaries allows a low privileged user to create a low privileged user (secretary) in the system. This results in unauthorized data manipulation.
Related
nvd
nvd
CVE-2023-3286
2024-07-09 11:15:12
cvelist
cvelist
veracode
veracode
Authorization Bypass
2024-07-11 10:50:22
vulnrichment
vulnrichment
cve
cve
CVE-2023-3286
2024-07-09 11:15:12
nessus
nessus
paloalto
paloalto
PAN-OS: OS Command Injection Vulnerability in the XML API
2023-12-13 17:00:00
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
AI Score
6.7
Confidence
Low
Related for OSV:CVE-2023-3286