CVE-2023-2904

The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the application programmable interface API. An attacker could log in using account credentials available through a request generated by an internal user and then...

CVE-2023-2904

CVE-2023-2904 affects HID SAFE’s External Visitor Manager portal (versions 5.8.0–5.11.3). The vulnerability arises from manipulation of the visitor-id via the web API after authentication through credentials obtainable from an internal user, enabling access to other users’ personal data. There is...