CVE-2023-46608
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jan 2, 2025
CWE ID 862
Summary
CVE-2023-46608 is a critical vulnerability affecting DoLogin Security, where missing authorization allows unauthorized access. The issue arises from incorrectly configured access control security levels in DoLogin Security versions from n/a to 3.7.1. An attacker can exploit this flaw to gain unauthorized access, potentially leading to data breaches or system compromise. It is essential for users to update their DoLogin Security installations to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.