CVE-2023-20238

CVSS 3.1 Score 10.0 of 10 (high)

Details

Published Sep 6, 2023
Updated: Jan 25, 2024
CWE ID 287

Summary

CVE-2023-20238 is a vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform. It allows an unauthenticated, remote attacker to forge credentials and gain unauthorized access to the affected system. The vulnerability arises from the flawed method used to validate SSO tokens. An attacker with a valid user ID associated with the affected Cisco BroadWorks system could exploit this vulnerability to commit toll fraud or execute commands at the privilege level of the forged account. If the account is an Administrator account, the attacker could view confidential information, modify customer settings, or alter settings for other users. The vulnerability poses a high risk to organizations as it could result in financial losses, data breaches, and unauthorized system manipulation. To remediate this vulnerability, it is recommended to apply patches or updates provided by Cisco for the affected products.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-20238 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options