CVE-2023-23344
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jun 23, 2023
Updated: Jul 3, 2023
CWE ID 276
Summary
CVE-2023-23344 is a permission issue affecting BigFix WebUI Insights version 14. This vulnerability allows authenticated, unprivileged operators to access administrator pages, potentially granting them elevated privileges. The impact of this issue could result in significant unauthorized access and subsequent data breaches or system manipulation. BigFix users are advised to update to the latest version of BigFix WebUI Insights to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- HCL Technologies Ltd.