CVE-2023-47022

Summary

Insecure Direct Object Reference in NCR Terminal Handler v.1.5.1 allows an unprivileged user to edit the audit logs for any user and can lead to CSV injection.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47022

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47022

• ←Previous
• Next→