Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP
CVE-2023-21408

8.4HIGH

Key Information:

Vendor

Axis Communications Ab

Status
Axis License Plate Verifier
Vendor
CVE Published:
3 August 2023

What is CVE-2023-21408?

An insufficient file permissions vulnerability in the integration interface of Axis Communications' product could allow unprivileged users to access unencrypted user credentials linked to third-party systems. This security flaw poses risks of unauthorized access, potentially leading to data exposure and interoperability issues. It is crucial for users to ensure adequate permission settings to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

AXIS License Plate Verifier 2.8.3 or earlier

References

https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712...

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.