Lucene search
SymantecCVE-2023-23957HistorySep 19, 2023 - 1:16 p.m.
CVE-2023-23957
2023-09-1913:16:21
CWE-601
symantec
web.nvd.nist.gov
23
cve-2023-23957
nvd
symantec identity portal
security vulnerability
authentication
query parameter
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
21.5%
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4
Affected configurations
Node
symantecidentity_portalMatch14.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | identity_portal | 14.4 | cpe:2.3:a:symantec:identity_portal:14.4:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Symantec - A Division of Broadcom",
"product": "Symantec Identity Governance And Administration",
"versions": [
{
"version": "14.4",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2023-23957
2023-09-19 13:16:21
vulnrichment
vulnrichment
cvelist
cvelist
prion
prion
Code injection
2023-09-19 13:16:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
21.5%
Related for CVE-2023-23957