9.8

CVE-2023-24468

Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update -
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp1
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp2
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp3
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp4
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp4_patch1
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp5
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp5_patch1
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp5_patch2
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp6
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp6_patch1
Microfocus ≫ Netiq Advanced Authentication Version 6.3 Update sp7
Microfocus ≫ Netiq Advanced Authentication Version 6.4 Update -
Microfocus ≫ Netiq Advanced Authentication Version 6.4 Update sp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.86% 0.538
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6372/data/advanced-authentication-releasenotes-6372.html
Release Notes
https://www.netiq.com/documentation/advanced-authentication-64/advanced-authentication-releasenotes-6411/data/advanced-authentication-releasenotes-6411.html
Release Notes