ghsa-9pr5-qq3c-fcv3
Vulnerability from github
Published
2023-05-15 12:30
Modified
2024-04-04 04:05
Severity
Details
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the REST interface.
{ "affected": [], "aliases": [ "CVE-2023-23445" ], "database_specific": { "cwe_ids": [ "CWE-284", "CWE-863" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-05-15T11:15:09Z", "severity": "HIGH" }, "details": "\nImproper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers\n1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote\nattacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the\nREST interface.\n\n", "id": "GHSA-9pr5-qq3c-fcv3", "modified": "2024-04-04T04:05:12Z", "published": "2023-05-15T12:30:16Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23445" }, { "type": "WEB", "url": "https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json" }, { "type": "WEB", "url": "https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf" }, { "type": "WEB", "url": "https://sick.com/psirt" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "type": "CVSS_V3" } ] }
Loading...