Skip to main content

Faveo Servicedesk

1 CVEs product

Monthly

CVE-2023-24625 MEDIUM POC This Month

Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Faveo Servicedesk
NVD
CVSS 3.1
6.5
EPSS
1.1%
EPSS 1% CVSS 6.5
MEDIUM POC This Month

Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) attack. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Faveo Servicedesk
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy