What is CVE-2023-47315?

CVE-2023-47315 is a high-severity vulnerability in H-Mdm Headwind Mdm, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2023-11-22.

How severe is CVE-2023-47315?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in H-Mdm Headwind Mdm

CVE-2023-47315

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens.

EPSS: 0.008 (52.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

H-mdm Headwind_mdm — versions 5.22.1
N/a — versions n/a

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2023-47315?: CVE-2023-47315 is a high-severity vulnerability in H-Mdm Headwind Mdm, classified under Use of Hard-coded Credentials. CVSS score: 8.8/10. Published 2023-11-22.
How severe is CVE-2023-47315?: High severity. CVSS v3 base score is 8.8 out of 10.