Lucene search
GoogleOSV:CVE-2023-3288HistoryJul 09, 2024 - 11:15 a.m.
CVE-2023-3288
2024-07-0911:15:12
Google
osv.dev
1
bola vulnerability
low privileged user
privileged user
privilege escalation
software
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
Low
A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system. This results in privilege escalation.
Related
veracode
veracode
Authorization Bypass
2024-07-11 10:44:54
vulnrichment
vulnrichment
cve
cve
CVE-2023-3288
2024-07-09 11:15:12
nvd
nvd
CVE-2023-3288
2024-07-09 11:15:12
cvelist
cvelist
nessus
nessus
paloalto
paloalto
PAN-OS: File Upload Vulnerability in the Web Interface
2023-12-13 17:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
Low
Related for OSV:CVE-2023-3288