Lucene search
PRIOn knowledge basePRION:CVE-2023-48375HistoryDec 15, 2023 - 8:15 a.m.
Authorization
2023-12-1508:15:00
PRIOn knowledge base
www.prio-n.com
3
smartstar software cws
web-based integration platform
missing authorization
vulnerability
privileged escalation
unauthorized access
SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users are able to access data or perform actions that they should not be allowed to perform via commands. An authenticated with normal user privilege can execute administrator privilege, resulting in performing arbitrary system operations or disrupting service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cws_collaborative_development_platform | eq | 10.25 |
Related
cve
cve
CVE-2023-48375
2023-12-15 08:15:45
cvelist
cvelist
CVE-2023-48375 SmartStar Software CWS Web-Base - Broken Access Control
2023-12-15 07:46:16
nvd
nvd
CVE-2023-48375
2023-12-15 08:15:45