Vulnerability in N/a
CVE-2023-49233
Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of configured credentials and potentially elevate their privileges to administrator level.
EPSS: 0.004 (31.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- N/a — versions n/a
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2023-49233?
- CVE-2023-49233 is a high-severity vulnerability in N/a, classified under Insufficiently Protected Credentials. CVSS score: 8.8/10. Published 2024-09-03.
- How severe is CVE-2023-49233?
- High severity. CVSS v3 base score is 8.8 out of 10.