CVE-2023-45814

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Oct 18, 2023
Updated: Oct 30, 2023
CWE ID 772

Summary

CVE-2023-45814 is a vulnerability affecting Bunkum version 4.0, an open-source protocol-agnostic request server for custom game servers. The vulnerability arises from the poor implementation of enforcing relations between tokens and users in the AuthenticationService, leading to cached tokens persisting after the request's lifetime. As a result, when attempting to use the cached token at the start of the next request, it may cause objects in the cache to be in a detached state. This vulnerability has a base severity rating of MEDIUM with a CVSS score of 5.3 and poses a potential risk to organizations using Bunkum, as it could potentially lead to unauthorized access or other security breaches. To remediate this issue, affected organizations should update their Bunkum installations to a version that addresses this vulnerability or apply any available patches provided by the vendor.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-45814 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options