PT-2023-31429 · Unknown · Prointegra Uptime Dc

Antoni Kwietniewski · Publicado 2023-10-04 · Atualizado 2025-03-03 · CVE-2023-4997

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProIntegra Uptime DC software versions prior to 2.0.0.33940

Description The issue is related to improper authorization in ProIntegra Uptime DC software, allowing regular users to change passwords of all other users, including administrators, leading to a privilege escalation.

Recommendations For versions prior to 2.0.0.33940, update to version 2.0.0.33940 or later to resolve the issue. As a temporary workaround, consider restricting access to user password management features to minimize the risk of exploitation.

Correção

Incorrect Authorization

Missing Authorization

Enumeração de Fraquezas

CWE-863

CWE-862

Identificadores relacionados

CVE-2023-4997

Produtos afetados

Prointegra Uptime Dc

Referências · 8

• https://t.me/cvenotify/58952 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-4997 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-4997 · Nota de Segurança
• https://cert.pl/posts/2023/10/CVE-2023-4997 · Nota
• https://twitter.com/cracbot/status/1710075080477422068 · Publicação no Twitter
• https://cert.pl/en/posts/2023/10/CVE-2023-4997 · Nota
• https://t.me/cibsecurity/71561 · Publicação no Telegram
• https://t.me/cvenotify/113173 · Publicação no Telegram