CVE-2023-33368
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-33368 is a cyber vulnerability that affects Control ID IDSecure 4.7.26.0 and earlier versions. This vulnerability allows sensitive information and passwords to be exfiltrated by users accessing certain API routes. The risk score is 25, indicating a medium level of severity. The base score is 6.5, with a confidentiality impact of high and an integrity impact of none. The exploitability score is 2.8, suggesting it is relatively easy to exploit. Remediation measures should be taken to address this vulnerability promptly to prevent potential harm to the organization's confidentiality and data security. Note: This summary includes factual information obtained from the given text without any biased or opinionated statements.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions