Lucene search

[email protected]CVE-2023-5921

HistoryNov 22, 2023 - 9:15 a.m.

CVE-2023-5921

2023-11-2209:15:07

CWE-841

[email protected]

web.nvd.nist.gov

cve-2023-5921

improper enforcement

behavioral workflow

dece software geodi

functionality bypass

nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.This issue affects Geodi: before 8.0.0.27396.

Affected configurations

NVD

Node

decesoftwaregeodiRange<8.0.0.27396

CPENameOperatorVersion
decesoftware:geodidecesoftware geodilt8.0.0.27396

CPE	Name	Operator	Version
decesoftware:geodi	decesoftware geodi	lt	8.0.0.27396

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Geodi",
    "vendor": "DECE Software",
    "versions": [
      {
        "lessThan": "8.0.0.27396",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-23-0650

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-5921

prion1 nvd1 cvelist1