Search criteria
1 vulnerability by Symantec - A Division of Broadcom
CVE-2023-23957 (GCVE-0-2023-23957)
Vulnerability from cvelistv5 – Published: 2023-09-19 12:30 – Updated: 2024-09-25 14:22
VLAI
Title
Open Redirection Vulnerability in Symantec Identity Portal 14.4
Summary
An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4
Severity
No CVSS data available.
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Symantec - A Division of Broadcom | Symantec Identity Governance And Administration |
Affected:
14.4
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T10:49:08.176Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/22544"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-23957",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-25T14:20:27.568059Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-25T14:22:08.217Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Symantec Identity Governance And Administration",
"vendor": "Symantec - A Division of Broadcom",
"versions": [
{
"status": "affected",
"version": "14.4"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An authenticated user can see and modify the value for \u2018next\u2019 query parameter in Symantec Identity Portal 14.4"
}
],
"providerMetadata": {
"dateUpdated": "2023-09-19T12:30:39.763Z",
"orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
"shortName": "symantec"
},
"references": [
{
"url": "https://support.broadcom.com/external/content/SecurityAdvisories/0/22544"
}
],
"title": "Open Redirection Vulnerability in Symantec Identity Portal 14.4",
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
"assignerShortName": "symantec",
"cveId": "CVE-2023-23957",
"datePublished": "2023-09-19T12:30:39.763Z",
"dateReserved": "2023-01-19T22:35:32.542Z",
"dateUpdated": "2024-09-25T14:22:08.217Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}