← CVE Intelligence

CVE-2023-25780

Status Internet Co.,Ltd. PowerBPM - Broken Access Control PUBLISHED

Description (CNA)

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence.

Affected (CNA)

Vendor / productVersions
Status Internet Co.,Ltd. / PowerBPMaffected 2.0

CWE

CWE-306

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.