PT-2023-31429 · Unknown · Prointegra Uptime Dc

Antoni Kwietniewski · Published 2023-10-04 · Updated 2025-03-03 · CVE-2023-4997

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ProIntegra Uptime DC software versions prior to 2.0.0.33940

Description The issue is related to improper authorization in ProIntegra Uptime DC software, allowing regular users to change passwords of all other users, including administrators, leading to a privilege escalation.

Recommendations For versions prior to 2.0.0.33940, update to version 2.0.0.33940 or later to resolve the issue. As a temporary workaround, consider restricting access to user password management features to minimize the risk of exploitation.

Fix

Incorrect Authorization

Missing Authorization

Weakness Enumeration

CWE-863

CWE-862

Related Identifiers

CVE-2023-4997

Affected Products

Prointegra Uptime Dc

References · 8

• https://osv.dev/vulnerability/CVE-2023-4997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4997 · Security Note
• https://t.me/cvenotify/58952 · Telegram Post
• https://cert.pl/posts/2023/10/CVE-2023-4997 · Note
• https://twitter.com/cracbot/status/1710075080477422068 · Twitter Post
• https://cert.pl/en/posts/2023/10/CVE-2023-4997 · Note
• https://t.me/cibsecurity/71561 · Telegram Post
• https://t.me/cvenotify/113173 · Telegram Post