CVE-2022-23173

CVE-2022-23173 describes an IDOR-type flaw in a web application (notably referenced with Priority Software Priority) where an attacker who can access the login/demo UI can alter the prog step parameter from 0 to 1 or higher, thereby gaining access to functions that should be restricted by privile...

CVE-2022-23173 Priority - Priority web Insecure direct object references (IDOR)

this vulnerability affect user that even not allowed to access via the web interface. First of all, the attacker needs to access the "Login menu - demo site" then he can see in this menu all the functionality of the application. If the attacker will try to click on one of the links, he will get a...

CVE-2021-23173 ICSMA-22-006-01 Philips Engage Software

The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data...

CVE-2021-23173

Philips Engage Software (Engage EC platform) is affected by CVE-2021-23173 due to improper access control (CWE-284). Affected versions are Engage Software 6.2.1 and earlier; an authenticated user may gain unauthorized access to sensitive data. The ICS advisory notes remote exploitation potential ...