← CVE Intelligence

CVE-2023-6329

Control iD iDSecure passwordCustom Authentication Bypass PUBLISHED

Description (CNA)

An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user.

Affected (CNA)

Vendor / productVersions
Control iD / iDSecureaffected 4.7.32.0

CWE

CWE-287

References

ADP enrichment

CVE

No English description supplied.