Lucene search

K
vulnrichmentHackeroneVULNRICHMENT:CVE-2023-39335
HistoryNov 14, 2023 - 11:18 p.m.

CVE-2023-39335

2023-11-1423:18:08
hackerone
github.com
epmm
vulnerability
unauthorized access
user impersonation
device enrollment

AI Score

9.4

Confidence

High

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potential misuse of user accounts and resources.

AI Score

9.4

Confidence

High

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-39335