CVE-2023-51650

Summary

Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces. This could result in disclosure of sensitive server information. Version 1.4.1 fixes this issue.

Affected Software

Weaknesses

• CWE-862: CWE-862: Missing Authorization

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/dromara/hertzbeat/security/advisories/GHSA-rrc5-qpxr-5jm2
• https://github.com/dromara/hertzbeat/releases/tag/v1.4.1

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/dromara/hertzbeat/security/advisories/GHSA-rrc5-qpxr-5jm2
• https://github.com/dromara/hertzbeat/releases/tag/v1.4.1

• ←Previous
• Next→