Lucene search
GoogleOSV:CVE-2023-3287HistoryJul 09, 2024 - 11:15 a.m.
CVE-2023-3287
2024-07-0911:15:12
Google
osv.dev
1
bola vulnerability
low privileged user
escalate privileges
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system. This results in privilege escalation.
Related
cve
cve
CVE-2023-3287
2024-07-09 11:15:12
nvd
nvd
CVE-2023-3287
2024-07-09 11:15:12
vulnrichment
vulnrichment
cvelist
cvelist
veracode
veracode
Authorization Bypass
2024-07-12 05:00:48
paloalto
paloalto
PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator
2023-12-13 17:00:00
CVSS3
9.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
Related for OSV:CVE-2023-3287