CVE-2023-24476

Katalog CVE

CVSS 3.3 · Low EPSS 0,13%

Kerentanan Improper Authorization pada ptc vuforia studio. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid.

Rincian

Terbit di NVD

7 Juni 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-285: Improper Authorization

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13 advisory pihak ketiga · pemerintah AS
• https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13 broken link