Lucene search
HistorySep 19, 2023 - 1:16 p.m.
CVE-2023-23957
symantec identity portal
authenticated user
query parameter
manipulation
cve-2023-23957
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
21.5%
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4
Affected configurations
Node
symantecidentity_portalMatch14.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | identity_portal | 14.4 | cpe:2.3:a:symantec:identity_portal:14.4:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
cvelist
cvelist
cve
cve
CVE-2023-23957
2023-09-19 13:16:21
prion
prion
Code injection
2023-09-19 13:16:00
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
AI Score
5.5
Confidence
High
EPSS
0.001
Percentile
21.5%
Related for NVD:CVE-2023-23957