EMSigner Security Vulnerability

EMSigner is an electronic signature solution from EMSigner India. A security vulnerability exists in EMSigner version v2.8.7, which stems from an Access Control Error vulnerability in AdHoc User that allows an unauthenticated attacker to arbitrarily modify usernames and permissions using a user's...

CVE-2023-43901

Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user...

CVE-2023-43900

CVE-2023-43900 affects EMSigner v2.8.7 with an insecure direct object reference (IDOR) vulnerability. The issue allows an attacker to gain unauthorized access to application content and view sensitive data of other users by manipulating the documentID and EncryptedDocumentId parameters. The provi...

CVE-2023-43902

Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token...

CVE-2023-43902

Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token...

CVE-2023-43902

CVE-2023-43902 affects EMSigner v2.8.7. The issue is an access-control failure in the Forgot Your Password feature that allows an unauthenticated attacker to access accounts of all registered users, including admin accounts, via a crafted password reset token. Documented CVSS v3.1 base score is 9...

PT-2023-29037

Name of the Vulnerable Software and Affected Versions EMSigner version 2.8.7 Description The issue allows attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters. This is due to...

PT-2023-29038

Name of the Vulnerable Software and Affected Versions EMSigner version 2.8.7 Description The issue is related to incorrect access control in the AdHoc User creation form, allowing unauthenticated attackers to modify usernames and privileges using the email address of a registered user...

PT-2023-29039

Name of the Vulnerable Software and Affected Versions EMSigner version 2.8.7 Description The issue is related to incorrect access control in the Forgot Your Password function, allowing unauthenticated attackers to access accounts of all registered users, including those with administrator...