CVE-2023-37987

Summary

CVE-2023-37987 is a critical vulnerability affecting the miniOrange YourMembership Single Sign On solution. This issue involves missing authorization controls, which can be exploited when access control security levels are incorrectly configured. As a result, unauthorized access to protected resources is possible, putting organizations using versions 1.1.3 and below at risk. This vulnerability underscores the importance of proper configuration management and access control implementation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.