PT-2024-14891 · Teosoft · Teobase

Tunahan Tekeoğlu · Published 2024-03-27 · Updated 2026-05-20 · CVE-2023-6153

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeoBASE versions through 20240327

Description The issue is related to an Authentication Bypass by Primary Weakness vulnerability in TeoSOFT Software TeoBASE, allowing authentication bypass. The vendor was contacted about this disclosure but did not respond.

Recommendations For versions through 20240327, as a temporary workaround, consider restricting access to sensitive areas of TeoBASE until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-305

Related Identifiers

CVE-2023-6153

Affected Products

Teobase

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-6153 · Security Note
• https://twitter.com/CVEnew/status/1772963721989468394 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1772999057419436125 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0238 · Note
• https://t.me/cveNotify/164202 · Telegram Post
• https://usom.gov.tr/bildirim/tr-24-0238 · Note