PT-2023-29928

🗓️ 31 Oct 2023 00:00:00Reported by Positive TechnologiesType

authentik: unauthenticated default admin password can be set after deletion; update to 2023.8.4 or 2023.10.2.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-46249	31 Oct 202319:22	–	circl
CNNVD	authentik Authorization Issues Vulnerability	31 Oct 202300:00	–	cnnvd
CVE	CVE-2023-46249	31 Oct 202315:20	–	cve
Cvelist	CVE-2023-46249 authentik potential installation takeover when default admin user is deleted	31 Oct 202315:20	–	cvelist
EUVD	EUVD-2023-50479	3 Oct 202520:07	–	euvd
NVD	CVE-2023-46249	31 Oct 202316:15	–	nvd
OSV	BIT-AUTHENTIK-2023-46249 authentik potential installation takeover when default admin user is deleted	16 Apr 202623:36	–	osv
OSV	CVE-2023-46249 authentik potential installation takeover when default admin user is deleted	31 Oct 202315:20	–	osv
Prion	Design/Logic Flaw	31 Oct 202316:15	–	prion
Veracode	Account Takeover	2 Nov 202307:49	–	veracode

Source	Link
github	www.github.com/goauthentik/authentik/releases/tag/version%2F2023.8.4
twitter	www.twitter.com/VulmonFeeds/status/1719422122823417922
osv	www.osv.dev/vulnerability/BIT-authentik-2023-46249
github	www.github.com/goauthentik/authentik/security/advisories/GHSA-rjvp-29xq-f62w
github	www.github.com/goauthentik/authentik/commit/261879022d25016d58867cf1f24e90b81ad618d0
github	www.github.com/goauthentik/authentik/commit/ea75741ec22ecef34bc7073f1163e17a8a2bf9fc
osv	www.osv.dev/vulnerability/CVE-2023-46249
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46249.json
t	www.t.me/cibsecurity/73261
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-46249

16 Apr 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.19.6 - 9.8

EPSS0.00686

SSVC