Lucene search

K
zdiAndrea Micalizzi aka rgodZDI-23-1508
HistoryOct 04, 2023 - 12:00 a.m.

(0Day) D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability

2023-10-0400:00:00
Andrea Micalizzi aka rgod
www.zerodayinitiative.com
6
d-link
d-view
privilege escalation
vulnerability
authorization
remote attackers
authentication

0.001 Low

EPSS

Percentile

29.0%

This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUsers method. The issue results from the lack of proper authorization before accessing a privileged endpoint. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user.

0.001 Low

EPSS

Percentile

29.0%

Related for ZDI-23-1508