NA

CVE-2023-34797

Published: 15/06/2023 Updated: 26/06/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.5 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Broken access control in the Registration page (/Registration.aspx) of Termenos CWX v8.5.6 allows malicious users to access sensitive information.

Vulnerable Product Search on Vulmon Subscribe to Product

temenos cwx 8.5.6

Github Repositories

CWX Register Broken Access Control Report: November 2022 Affected: Tested on v856 Fix: No information Credit: WhiteBearVN_ ID: CVE-2022-45287, CVE-2023-34797 Description Temenos CWX has an Broken Access Control vulnerability in /Registrationaspx, leak serial number and can be updated information, welcome message at home page Steps to reproduce User login, we will not see