Privilege escalation in Microfocus Fortify Scancentral Dast
CVE-2023-5913
Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.
EPSS: 0.006 (43.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.
Affected products
- Microfocus Fortify_scancentral_dast — versions 21.1, 21.2, 21.2.1
- Opentext Fortify Scancentral Dast — versions 21.1, 21.2, 21.2.1
Weakness classification (CWE)
References
- security@opentext.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-5913?
- CVE-2023-5913 is a high-severity vulnerability in Microfocus Fortify Scancentral Dast, classified under Incorrect Privilege Assignment. CVSS score: 8.2/10. Published 2023-11-08.
- How severe is CVE-2023-5913?
- High severity. CVSS v3 base score is 8.2 out of 10.