CVE Vulnerabilities

CVE-2023-47320

Published: Dec 13, 2023 | Modified: Dec 15, 2023
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in Maintenance Mode due to broken access control. This makes the application unavailable to all users. This affects Silverpeas Core 6.3.1 and below.

Affected Software

Name Vendor Start Version End Version
Silverpeas Silverpeas * 6.3.2 (excluding)

References