CVE Vulnerabilities

CVE-2023-27001

Published: Feb 08, 2024 | Modified: Jun 17, 2025
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An issue discovered in Egerie Risk Manager v4.0.5 allows attackers to bypass the signature mechanism and tamper with the values inside the JWT payload resulting in privilege escalation.

Affected Software

NameVendorStart VersionEnd Version
EgerieEgerie4.0.5 (including)4.0.5 (including)

References