CVE-2023-3064

CVE-2023-3064 concerns the Mobatime AMXGT100 mobile app up to version 1.3.20, where an anonymous user can obtain the list of existing users. Related entries CVE-2023-3065 and CVE-2023-3066 describe broader authentication issues: CVE-2023-3065 (improper authentication) allows an authentication byp...

PT-2023-22855 · Mobatime · Mobatime

Name of the Vulnerable Software and Affected Versions: Mobatime mobile application AMXGT100 versions 1.3.20 and earlier Description: The issue allows a low-privileged user to impersonate anyone else, including administrators, due to an Incorrect Authorization vulnerability in the Mobatime mobile...

Mobatime 授权问题漏洞

Mobatime is a time and frequency synchronization solution from Mobatime, Inc. A security vulnerability exists in Mobatime AMXGT100 version 1.3.20 and prior versions that stems from improper authentication...

PT-2023-22844 · Mobatime · Mobatime

Name of the Vulnerable Software and Affected Versions: Mobatime mobile application AMXGT100 versions 1.3.20 and earlier Description: The issue is related to an Improper Authentication vulnerability that allows Authentication Bypass in the Mobatime mobile application. Recommendations: For Mobatime...

Mobatime 安全漏洞

Mobatime is a time and frequency synchronization solution from Mobatime, Inc. A security vulnerability exists in Mobatime AMXGT100 version 1.3.20 and earlier versions that stems from incorrect authorization...

Mobatime 安全漏洞

Mobatime is a time and frequency synchronization solution from Mobatime, Inc. A security vulnerability exists in Mobatime AMXGT100 version 1.3.20 and prior versions. An attacker could exploit the vulnerability to obtain a list of existing users managed by the application...

PT-2023-22833 · Mobatime · Mobatime

Name of the Vulnerable Software and Affected Versions: Mobatime mobile application AMXGT100 versions 1.3.20 and earlier Description: The issue allows an anonymous user to obtain a list of existing users managed by the application, which could facilitate further attacks. It is related to an improp...

CVE-2023-3033

Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web application: through 06.7.22...

CVE-2023-3032

Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application Documentary proof upload modules allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web application: through 06.7.22...

CVE-2023-3032

Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application Documentary proof upload modules allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web application: through 06.7.22...

CVE-2023-3033

Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web application: through 06.7.22...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application Documentary proof upload modules allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web application: through 06.7.22...

Authorization

Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web application: through 06.7.22...

CVE-2023-3033 Mobatime web application - broken authorisation mechanisms

Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web application: through 06.7.22...

CVE-2023-3033 Mobatime web application - broken authorisation mechanisms

Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web application: through 06.7.22...

CVE-2023-3033

Mobatime web application is affected by CVE-2023-3033 due to incorrect authorization and misconfigured access control, enabling privilege escalation through versions up to 06.7.22. The product/component is Mobatime web app; root cause is broken/incorrect access control. Impact is privilege escala...

CVE-2023-3032 Mobatime web application - Arbitrary file upload (RCE)

Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application Documentary proof upload modules allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web application: through 06.7.22...

CVE-2023-3032 Mobatime web application - Arbitrary file upload (RCE)

Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application Documentary proof upload modules allows a malicious user to Upload a Web Shell to a Web Server.This issue affects Mobatime web application: through 06.7.22...

CVE-2023-3032

CVE-2023-3032 concerns the Mobatime web application, where an Unrestricted Upload of File with Dangerous Type vulnerability in the documentary proof upload modules allows a malicious user to upload a Web Shell to the web server. Affected versions are through 06.7.22. Available connected sources (...

Mobatime 安全漏洞

Mobatime is a time and frequency synchronization solution from Mobatime, Inc. A security vulnerability exists in versions prior to Mobatime 06.7.2022, which stems from misauthorization in a web application...