Paper/Archive/CVE-2023-5913

CVE-2023-5913

opentext Fortify ScanCentral DAST — A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.

EPSS 0.6%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 46.3.463 × 209.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.

Affected

ProductAffectedFixed inSource

Fortify ScanCentral DAST21.1–CNA

Fortify ScanCentral DAST21.2–CNA

Fortify ScanCentral DAST21.2.1–CNA

Fortify ScanCentral DAST22.1–CNA

Fortify ScanCentral DAST22.1.1–CNA

Fortify ScanCentral DAST22.2–CNA

Fortify ScanCentral DAST23.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

OpenText (CNA)8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refportal.microfocus.com/s/article/KM000023500?language=en_US