CVE-2023-45793
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 12, 2024
CWE ID 863
Summary
CVE-2023-45793: A vulnerability has been discovered in Siveillance Control versions greater than V2.8 but less than V3.1.1. This issue arises due to the product's failure to adequately verify access groups assigned to individual users. As a result, a locally logged-in user may elevate their privileges, gaining write access to objects for which they only had read access. This security flaw could potentially lead to unauthorized modifications and data corruption.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.