Lucene search

MitreVULNRICHMENT:CVE-2023-39069

HistorySep 11, 2023 - 12:00 a.m.

CVE-2023-39069

2023-09-1100:00:00

mitre

github.com

strangebee

thehive

cortex

remote attacker

privilege gain

active directory

AI Score

7.4

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authentication mechanism.

References

github.com/StrangeBeeCorp/Security/blob/main/Security%20advisories/SB-SEC-ADV-2022-001%3A%20Authentication%20bypass%20due%20to%20incomplete%20checks%20in%20the%20Active%20Directory%20authentication%20module.md