7.5
CVE-2023-2959
- EPSS 0.53%
- Veröffentlicht 17.07.2023 14:15:10
- Zuletzt bearbeitet 22.05.2026 10:16:15
- Quelle iletisim@usom.gov.tr
- CVE-Watchlists
- Unerledigt
LoginAuthentication Bypass by Primary Weakness in Oliva Expertise
Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users. This issue affects Oliva Expertise EKS: before 1.2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Olivaekspertiz ≫ Oliva Ekspertiz Version < 1.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.53% | 0.403 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| iletisim@usom.gov.tr | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-305 Authentication Bypass by Primary Weakness
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
https://www.usom.gov.tr/bildirim/tr-23-0409
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0409