PT-2024-13843 · Wallix · Wallix Access Manager+1

Published 2024-01-08 · Updated 2024-01-12 · CVE-2023-49961

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions WALLIX Bastion versions 7.x through 10.x WALLIX Access Manager versions 3.x through 4.x

Description The issue is related to Incorrect Access Control, which can lead to sensitive data exposure.

Recommendations For WALLIX Bastion versions 7.x through 10.x, update to a version that includes the fix for the Incorrect Access Control issue. For WALLIX Access Manager versions 3.x through 4.x, update to a version that includes the fix for the Incorrect Access Control issue. As a temporary workaround, consider restricting access to sensitive data until a patch is available.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-49961

Affected Products

Wallix Access Manager

Wallix Bastion

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-49961 · Security Note
• https://osv.dev/vulnerability/CVE-2023-49961 · Vendor Advisory
• https://wallix.com/support/alerts · Vendor Advisory
• https://t.me/cvenotify/66679 · Telegram Post
• https://twitter.com/CVEnew/status/1744456102367183107 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1744505754101444971 · Twitter Post