What is CVE-2023-47316?

CVE-2023-47316 is a medium-severity vulnerability in H-Mdm Headwind Mdm, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 5.4/10. Published 2023-11-22.

How severe is CVE-2023-47316?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Auth bypass in H-Mdm Headwind Mdm

CVE-2023-47316

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to potentially sensitive API calls such as listing users and their data, file management API calls and audit-related API calls.

Vulnerability class: IDOR (Insecure Direct Object Reference)

EPSS: 0.004 (34.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

H-mdm Headwind_mdm — versions 5.22.1
N/a — versions n/a

Weakness classification (CWE)

CWE-639 — Authorization Bypass Through User-Controlled Key

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2023-47316?: CVE-2023-47316 is a medium-severity vulnerability in H-Mdm Headwind Mdm, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 5.4/10. Published 2023-11-22.
How severe is CVE-2023-47316?: Medium severity. CVSS v3 base score is 5.4 out of 10.