CVE-2023-45598

Summary

CVE-2023-45598 is a newly disclosed vulnerability affecting the AiLux imx6 bundle. This issue, classified as a CWE-862 "Missing Authorization" vulnerability, resides in the "measure" functionality of the web application. An unauthenticated attacker can exploit this flaw to gain unauthorized access to confidential measure information. The affected versions of the imx6 bundle are below imx6_1.0.7-2. Organizations using these versions are urged to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.