CVE-2023-48783

Summary

CVE-2023-48783 is a newly disclosed vulnerability affecting PortiPortal versions 7.2.1 and below, 7.0.6 and below, 6.0.14 and below, and 5.3.8 and below. This issue is classified as an Authorization Bypass Through User-Controlled Key (CWE-639) vulnerability. A remote authenticated user with read-only permissions can exploit this flaw by crafting malicious GET requests, potentially gaining unauthorized access to other organization endpoints. The impact of this vulnerability is significant, as it allows an attacker to bypass the intended access control mechanisms, posing a serious risk to organizational security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.