CVE-2023-25780
—CVSS 3.1
5.7 medium
EPSS
<1%p17
Published
()
Modified
Description
It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence.
- Vendors
- status
- Products
- powerbpm
- Weakness
- CWE-306
- Vector
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.