by Kastro
Paper/Archive/CVE-2023-24468

CVE-2023-24468

microfocus — Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.6.586 × 2011.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2

Affected

ProductAffectedFixed inSource
NetIQ Advanced Authenticationversions prior to 6.4.1.1 and 6.3.7.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refnetiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6372/data/advanced-authentication-releasenotes-6372.htmlrefnetiq.com/documentation/advanced-authentication-64/advanced-authentication-releasenotes-6411/data/advanced-authentication-releasenotes-6411.html