Ofcms CVE-2023-24760

HIGH

Improper Privilege Management (CWE-269)

2023-03-16 cve@mitre.org

Privilege Escalation Ofcms

8.8

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Mar 16, 2023 - 02:15 nvd

HIGH 8.8

DescriptionNVD

An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController.

AnalysisAI

An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified as Improper Privilege Management (CWE-269), which allows attackers to escalate privileges to gain unauthorized elevated access. An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController. Affected products include: Ofcms Project Ofcms.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply principle of least privilege, validate privilege transitions, implement proper role separation.

More in Ofcms

View all

CVE-2024-34256 CRITICAL Act Now POC

OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function. Rated critical severity (CVSS 9.8), this vulnera

CVE-2019-9617 HIGH This Week POC

An issue was discovered in OFCMS before 1.1.3. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitabl

CVE-2019-9614 HIGH This Week POC

An issue was discovered in OFCMS before 1.1.3. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitabl

CVE-2019-9612 HIGH This Week POC

An issue was discovered in OFCMS before 1.1.3. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitabl

CVE-2019-9609 HIGH This Week POC

An issue was discovered in OFCMS before 1.1.3. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitabl

CVE-2019-9608 HIGH This Week POC

An issue was discovered in OFCMS before 1.1.3. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitabl

CVE-2019-9616 HIGH This Week POC

An issue was discovered in OFCMS before 1.1.3. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitabl

CVE-2019-9615 HIGH This Week POC

An issue was discovered in OFCMS before 1.1.3. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitabl

CVE-2019-9613 HIGH This Week POC

An issue was discovered in OFCMS before 1.1.3. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitabl

CVE-2024-48236 MEDIUM This Month POC

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the writ

CVE-2024-48235 MEDIUM This Month POC

An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController

CVE-2019-9611 MEDIUM This Month POC

An issue was discovered in OFCMS before 1.1.3. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploita

Same weakness CWE-269 – Improper Privilege Management

View all

CVE-2017-5689 CRITICAL POC

CVE-2017-12635 CRITICAL POC

CVE-2012-3993 CRITICAL POC

CVE-2017-11467 CRITICAL POC

CVE-2014-1510 CRITICAL POC

CVE-2014-1511 CRITICAL POC

CVE-2016-0151 HIGH POC

CVE-2013-0643 HIGH

Same technique Privilege Escalation

View all

CVE-2025-47812 CRITICAL POC

CVE-2013-0422 CRITICAL POC

CVE-2013-0632 CRITICAL POC

CVE-2017-5689 CRITICAL POC

CVE-2017-12635 CRITICAL POC

CVE-2016-10372 CRITICAL POC

CVE-2014-9583 CRITICAL POC

CVE-2012-0297 CRITICAL POC

Share

CVE-2023-24760 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy