Lucene search

K
zdiAndrea Micalizzi aka rgodZDI-23-719
HistoryMay 24, 2023 - 12:00 a.m.

D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability

2023-05-2400:00:00
Andrea Micalizzi aka rgod
www.zerodayinitiative.com
7
d-link
d-view
showuser
privilege escalation
vulnerability
authorization
remote attackers
authentication

0.0005 Low

EPSS

Percentile

16.2%

This vulnerability allows remote attackers to escalate privileges on affected installations of D-Link D-View. Authentication is required to exploit this vulnerability. The specific flaw exists within the showUser method. The issue results from the lack of proper authorization before accessing a privileged endpoint. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the user.

0.0005 Low

EPSS

Percentile

16.2%

Related for ZDI-23-719