CVE-2023-51650

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Dec 22, 2023
Updated: Jan 3, 2024
CWE ID 862

Summary

CVE-2023-51650, also known as Hertzbeat unauthorized access vulnerability, affects the open-source real-time monitoring system Hertzbeat prior to version 1.4.1. The vulnerability arises from permission configuration issues in Spring Boot, which allow unauthorized access to three interfaces, potentially leading to the disclosure of sensitive server information. To remediate this issue, organizations are advised to update their Hertzbeat installations to version 1.4.1 or later. This vulnerability poses a high risk to organizations as it can result in the compromise of confidential information without requiring any privileges or user interaction, and it can be exploited remotely over a network. The National Vulnerability Database (NVD) has given this vulnerability a base severity score of 7.5 out of 10.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-51650 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options