CVE-2023-24476

Summary

An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid.

Affected Software

Weaknesses

• CWE-285: CWE-285: Improper Authorization

ADP Enrichment

CVE Program Container

Additional References

• https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13

• ←Previous
• Next→