CVE Vulnerabilities

CVE-2023-3050

Reliance on Cookies without Validation and Integrity Checking

Published: Jun 13, 2023 | Modified: Jun 22, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass.This issue affects Lockcell: before 15.

Weakness

The product relies on the existence or values of cookies when performing security-critical operations, but it does not properly ensure that the setting is valid for the associated user.

Affected Software

Name Vendor Start Version End Version
Lockcell_firmware Tmtmakine * 15.0 (excluding)

Potential Mitigations

References