CVE-2023-4997 — Improper authorisation in Uptime DC

CVE-2023-4997

Improper authorisation in Uptime DC PUBLISHED

Description (CNA)

Improper authorisation of regular users in ProIntegra Uptime DC software (versions below 2.0.0.33940) allows them to change passwords of all other users including administrators leading to a privilege escalation.

Affected (CNA)

Vendor / product	Versions
ProIntegra S.A. / UptimeDC	affected 0 before 2.0.0.33940

CWE

CWE-863

References

https://cert.pl/posts/2023/10/CVE-2023-4997/
https://cert.pl/en/posts/2023/10/CVE-2023-4997/

ADP enrichment

CVE

No English description supplied.

https://cert.pl/posts/2023/10/CVE-2023-4997/
https://cert.pl/en/posts/2023/10/CVE-2023-4997/

CISA-ADP

No English description supplied.

No references supplied.