CVE-2023-4972

Summary

CVE-2023-4972 is an Improper Privilege Management vulnerability affecting Yepas Digital's Yepas software. This issue enables unauthorized users to collect data as provided by regular users, potentially leading to confidential information disclosure. Access controls are not enforced properly, allowing this data collection without proper authorization. This vulnerability poses a risk to organizations using the Yepas software and highlights the importance of implementing robust access control measures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.