Authentication flaw

An issue in the component SuperUserSetuserModuleFrontController:init of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call...

CVE-2023-45899

The CVE-2023-45899 relates to idnovate Superuser: prior to v2.4.2, the SuperUserSetuserModuleFrontController:init() component allows bypassing authentication via a crafted HTTP call. Impact is authenticated bypass (no confidentiality / integrity if mitigated) as described; affected software is id...

CVE-2023-45899

An issue in the component SuperUserSetuserModuleFrontController:init of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call...