CVE-2023-2978
Assigner: VulDB
Published: 2023-05-30T14:00:05.299Z
State: PUBLISHED
title: Abstrium Pydio Cells Change Subscription authorization
problemTypes: descriptions: type: CWE
cweId: CWE-639
description: CWE-639 Authorization Bypass
affected: vendor: Abstrium
product: Pydio Cells
versions: version: 4.2.0
status: affected
modules: Change Subscription Handler
descriptions: value: A vulnerability was found in Abstrium Pydio Cells 4.2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Change Subscription Handler. The manipulation leads to authorization bypass. The exploit has been disclosed to the public and may be used. Upgrading to version 4.2.1 is able to address this issue. It is recommended to upgrade the affected component. VDB-230210 is the identifier assigned to this vulnerability.
value: Eine problematische Schwachstelle wurde in Abstrium Pydio Cells 4.2.0 ausgemacht. Davon betroffen ist unbekannter Code der Komponente Change Subscription Handler. Mit der Manipulation mit unbekannten Daten kann eine authorization bypass-Schwachstelle ausgenutzt werden. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 4.2.1 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.
metrics: cvssV3_1: version: 3.1
baseScore: 4.6
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
baseSeverity: MEDIUM
cvssV3_0: version: 3.0
baseScore: 4.6
vectorString: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
baseSeverity: MEDIUM
cvssV2_0: version: 2.0
baseScore: 4.1
vectorString: AV:A/AC:L/Au:S/C:N/I:P/A:P
timeline: time: 2023-05-30T00:00:00.000Z
value: Advisory disclosed
time: 2023-05-30T00:00:00.000Z
value: CVE reserved
time: 2023-05-30T02:00:00.000Z
value: VulDB entry created
time: 2023-06-24T09:00:29.000Z
value: VulDB entry last update
credits: value: ignatiusmichael (VulDB User)
type: analyst