CVSS 3.1 Score 7.2 of 10 (high)


Published Oct 10, 2023
Updated: Oct 17, 2023
CWE ID 613


CVE-2023-42768 is a cyber vulnerability that affects multiple products, including those with the codes fnGJcf, ZQTthK, fnGJcd, and cubD5t. This vulnerability occurs when a non-admin user is assigned an administrator role via an iControl REST PUT request and then has their role changed back to a non-admin role using the Configuration utility, tmsh, or iControl REST. Despite the change in role, the non-admin user can still have access to iControl REST admin resources. The vulnerability has a base severity of HIGH and a base score of 7.2 according to the CVSS:3.1 vector string. The impact includes high integrity and confidentiality impacts, with a potential for unauthorized access to sensitive information. Remediation for this vulnerability involves applying patches or updates provided by the affected product vendors.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-42768 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options