PT-2023-16550 · Unknown · Diaenergie
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
DIAEnergie versions prior to v1.9.03.001
Description
The issue concerns improper authorization in the affected product, which could allow an unauthorized user to bypass authorization and access privileged functionality.
Recommendations
For versions prior to v1.9.03.001, update to version v1.9.03.001 or later to resolve the issue. As a temporary workaround, consider restricting access to privileged functionality until the update is applied.
Fix
Improper Authorization
Files Accessible to External Parties
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Diaenergie