Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-4606
HistoryOct 25, 2023 - 6:17 p.m.

Command injection

2023-10-2518:17:00
PRIOn knowledge base
www.prio-n.com
7
command injection
authenticated user
password change
api vulnerability
thinksystem v2
thinksystem v3
xcc server

8 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.

This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

Related

nvd 1
cvelist 1
cve 1
nvd
nvd
CVE-2023-4606
2023-10-25 18:17:41
cvelist
cvelist
CVE-2023-4606
2023-10-24 20:25:09
cve
cve
CVE-2023-4606
2023-10-25 18:17:41

8 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON
Related for PRION:CVE-2023-4606
nvd1cvelist1cve1