CVE-2023-6451

—

CVSS 3.1

7.5 high

EPSS

<1%p43

Published

Feb 16, 2024 (Feb 16, 2024)

Modified

Jun 17, 2026

Description

Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the application's authentication mechanisms.

Vendors: alayacare
Products: procura
Weakness: CWE-1394, CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.