CVE-2023-47180
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 2, 2025
CWE ID 862
Summary
CVE-2023-47180 is a Missing Authorization vulnerability affecting Finale Lite versions from n/a to 2.16.0. Hackers can exploit incorrectly configured access control security levels in this software, gaining unauthorized access and potentially executing malicious actions. This issue could lead to significant security risks, emphasizing the importance of implementing proper access control measures. Users are advised to update Finale Lite to the latest version to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.