CVE-2023-27983

Name of the Vulnerable Software and Affected Versions IGSS Data Server versions V16.0.0.23040 and prior IGSS Dashboard versions V16.0.0.23040 and prior Custom Reports versions V16.0.0.23040 and prior

Description The issue is related to the absence of authentication for a critical function in the Data Server TCP interface. This could allow a remote attacker to delete arbitrary data, specifically reports from the IGSS project report directory, leading to data loss.

Recommendations For IGSS Data Server versions V16.0.0.23040 and prior, update to a version that includes authentication for critical functions. For IGSS Dashboard versions V16.0.0.23040 and prior, update to a version that includes authentication for critical functions. For Custom Reports versions V16.0.0.23040 and prior, update to a version that includes authentication for critical functions. As a temporary workaround, consider restricting access to the Data Server TCP interface until a patch is available.