PT-2023-19323 · Symantec · Symantec Identity Portal

Kelsey Henton · Publicado 2023-09-19 · Atualizado 2023-09-21 · CVE-2023-23957

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Symantec Identity Portal version 14.4

Description An authenticated user can see and modify the value for the next query parameter.

Recommendations For Symantec Identity Portal version 14.4, consider restricting access to the next query parameter to prevent unauthorized modifications until a patch is available.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

CVE-2023-23957

Produtos afetados

Symantec Identity Portal

Referências · 7

• https://support.broadcom.com/external/content/SecurityAdvisories/0/22544 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-23957 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1704147548208812033 · Publicação no Twitter
• https://t.me/cibsecurity/70713 · Publicação no Telegram
• https://twitter.com/DMFezzaReedCISA/status/1704363996973809999 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-23957 · Nota de Segurança
• https://twitter.com/CVEnew/status/1704116861170848129 · Publicação no Twitter