CVE-2023-6483

aditaas allied digital integrated tool-as-a-service

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-6483

Katalog CVE

CVSS 9.8 · Critical EPSS 1,2%

Kerentanan Improper Authentication pada aditaas allied digital integrated tool-as-a-service. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The vulnerability exists in ADiTaaS (Allied Digital Integrated Tool-as-a-Service) version 5.1 due to an improper authentication vulnerability in the ADiTaaS backend API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable platform. Successful exploitation of this vulnerability could allow the attacker to gain full access to the customers’ data and completely compromise the targeted platform.

Rincian

Terbit di NVD
18 Desember 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-287: Improper Authentication
EPSS (30 hari)
1,2% peluang dieksploitasi; lebih tinggi dari 67,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
aditaas allied digital integrated tool-as-a-service Versi 5.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.