CVE-2023-41264

Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret...

CVE-2023-41264

Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret...

Authentication flaw

Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret...

Netwrix UserCube Security Vulnerability

Netwrix UserCube is a solution from US-based Netwrix for user identity and access management. A security vulnerability exists in Netwrix Usercube versions prior to 6.0.215, which stems from a vulnerability that allows an attacker to bypass authentication on deployed endpoints, resulting in elevat...

CVE-2023-41264

Netwrix Usercube prior to 6.0.215 exposes an authentication bypass on misconfigured on‑prem deployments, enabling privilege escalation via the deployment endpoints POST /api/Deployment/ExportConfiguration and POST /api/Deployment when restSettings.AuthorizedClientId and restSettings.AuthorizedSec...

CVE-2023-41264

Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret...

CVE-2023-41264

Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettings.AuthorizedClientId and restSettings.AuthorizedSecret...

PT-2023-27877 · Netwrix · Netwrix Usercube

Name of the Vulnerable Software and Affected Versions: Netwrix Usercube versions prior to 6.0.215 Description: The issue allows authentication bypass on deployment endpoints, leading to privilege escalation in certain misconfigured on-premises installations. This occurs when the configuration omi...