CVE Vulnerabilities

CVE-2023-5913

Incorrect Privilege Assignment

Published: Nov 08, 2023 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.

Weakness

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Fortify_scancentral_dast Microfocus 21.1 (including) 21.1 (including)
Fortify_scancentral_dast Microfocus 21.2 (including) 21.2 (including)
Fortify_scancentral_dast Microfocus 21.2.1 (including) 21.2.1 (including)
Fortify_scancentral_dast Microfocus 22.1 (including) 22.1 (including)
Fortify_scancentral_dast Microfocus 22.1.1 (including) 22.1.1 (including)
Fortify_scancentral_dast Microfocus 22.2 (including) 22.2 (including)
Fortify_scancentral_dast Microfocus 23.1 (including) 23.1 (including)

Potential Mitigations

References