Lucene search
TR-CERTVULNRICHMENT:CVE-2023-4934HistorySep 27, 2023 - 7:35 a.m.
CVE-2023-4934 IDOR in Usta AYBS
2023-09-2707:35:04
CWE-639
TR-CERT
github.com
idor
usta aybs
authentication abuse
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Authorization Bypass Through User-Controlled Key vulnerability in Usta AYBS allows Authentication Abuse, Authentication Bypass.This issue affects AYBS: before 1.0.3.
References
Related
cvelist
cvelist
CVE-2023-4934 IDOR in Usta AYBS
2023-09-27 07:35:04
nvd
nvd
CVE-2023-4934
2023-09-27 15:19:41
prion
prion
Authorization
2023-09-27 15:19:00
cve
cve
CVE-2023-4934
2023-09-27 15:19:41
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2023-4934