CVE-2023-25997

Name of the Vulnerable Software and Affected Versions Sola Support Ticket versions 3.17 and earlier

Description The issue is related to a Missing Authorization vulnerability in SolaPlugins Sola Support Ticket, which allows exploiting incorrectly configured access control security levels.

Recommendations For Sola Support Ticket versions 3.17 and earlier, update to a version that includes the necessary security patches to fix the Missing Authorization vulnerability. As a temporary workaround, consider reviewing and correcting the access control security levels configuration to minimize the risk of exploitation.