An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administrative API token.
References
Configurations
No configuration.
History
21 Nov 2024, 08:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/fulldisclosure/2024/Apr/1 - | |
| References | () https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-003.txt - | |
| References | () https://www.schutzwerk.com/blog/schutzwerk-sa-2023-003/ - | |
| References | () https://www.visual-planning.com/en/support-portal/updates - |
28 Oct 2024, 16:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-294 |
27 Aug 2024, 19:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-288 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
05 Apr 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Mar 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-29 16:15
Updated : 2024-11-21 08:33
NVD link : CVE-2023-49231
Mitre link : CVE-2023-49231
CVE.ORG link : CVE-2023-49231
JSON object : View
Products Affected
No product.
CWE
CWE-294
Authentication Bypass by Capture-replay