CVEvulnerability
CVE-2023-6554
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-01-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-862
Description
When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it is possible for any user to download protected information like exam answers.
Affected configurations
• tecnick tcexam (< 15.1.0)
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://cert.pl/en/posts/2024/01/CVE-2023-6554/ Third Party Advisory
- https://cert.pl/posts/2024/01/CVE-2023-6554/ Third Party Advisory
- https://tcexam.org/ Product
- https://cert.pl/en/posts/2024/01/CVE-2023-6554/ Third Party Advisory
- https://cert.pl/posts/2024/01/CVE-2023-6554/ Third Party Advisory
- https://tcexam.org/ Product