9.8

CVE-2023-24468

Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2

Data is provided by the National Vulnerability Database (NVD)
Microfocus ≫ Netiq Advanced Authentication Version6.3 Update-
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp1
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp2
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp3
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp4
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp4_patch1
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp5
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp5_patch1
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp5_patch2
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp6
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp6_patch1
Microfocus ≫ Netiq Advanced Authentication Version6.3 Updatesp7
Microfocus ≫ Netiq Advanced Authentication Version6.4 Update-
Microfocus ≫ Netiq Advanced Authentication Version6.4 Updatesp1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.3% 0.531
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.