← CVE Intelligence

CVE-2023-44397

CloudExplorer Lite permission bypass vulnerability PUBLISHED

Description (CNA)

CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with `matching/API/`, which can cause a permission bypass. Version 1.4.1 contains a patch for this issue.

Affected (CNA)

Vendor / productVersions
CloudExplorer-Dev / CloudExplorer-Liteaffected < 1.4.1

CWE

CWE-287

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.