CVE Vulnerabilities

CVE-2023-5913

Incorrect Privilege Assignment

Published: Nov 08, 2023 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.

Weakness

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Affected Software

NameVendorStart VersionEnd Version
Fortify_scancentral_dastMicrofocus21.1 (including)21.1 (including)
Fortify_scancentral_dastMicrofocus21.2 (including)21.2 (including)
Fortify_scancentral_dastMicrofocus21.2.1 (including)21.2.1 (including)
Fortify_scancentral_dastMicrofocus22.1 (including)22.1 (including)
Fortify_scancentral_dastMicrofocus22.1.1 (including)22.1.1 (including)
Fortify_scancentral_dastMicrofocus22.2 (including)22.2 (including)
Fortify_scancentral_dastMicrofocus23.1 (including)23.1 (including)

Potential Mitigations

References