CVE Vulnerabilities

CVE-2023-50935

Direct Request ('Forced Browsing')

Published: Feb 02, 2024 | Modified: Feb 02, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM PowerSC 1.3, 2.0, and 2.1 fails to properly restrict access to a URL or resource, which may allow a remote attacker to obtain unauthorized access to application functionality and/or resources. IBM X-Force ID: 275115.

Weakness

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

Affected Software

Name Vendor Start Version End Version
Powersc Ibm 1.3 (including) 1.3 (including)
Powersc Ibm 2.0 (including) 2.0 (including)
Powersc Ibm 2.1 (including) 2.1 (including)

Potential Mitigations

References