CVEvulnerability
CVE-2023-49233
8.8 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2024-09-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-522
Description
Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of configured credentials and potentially elevate their privileges to administrator level.
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- https://www.schutzwerk.com/blog/schutzwerk-sa-2023-005/ www.schutzwerk.com
- https://www.visual-planning.com/en/support-portal/updates www.visual-planning.com