What is CVE-2023-48641?

CVE-2023-48641 is a high-severity vulnerability in Archerirm Archer, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 7.5/10. Published 2023-12-12.

How severe is CVE-2023-48641?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Archerirm Archer

CVE-2023-48641

Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass authorization checks, in order to gain execute access to AWF application resources.

Vulnerability class: IDOR (Insecure Direct Object Reference)

EPSS: 0.005 (38.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L.

Affected products

Archerirm Archer
N/a — versions n/a

Weakness classification (CWE)

CWE-639 — Authorization Bypass Through User-Controlled Key

References

cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2023-48641?: CVE-2023-48641 is a high-severity vulnerability in Archerirm Archer, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 7.5/10. Published 2023-12-12.
How severe is CVE-2023-48641?: High severity. CVSS v3 base score is 7.5 out of 10.