CVE-2023-2904

CVE-2023-2904

What is CVE-2023-2904?

The External Visitor Manager portal in HID's SAFE (versions 5.8.0 to 5.11.3) contains a vulnerability that allows an attacker to manipulate user IDs through the application programming interface (API). By gaining access using internal user credentials, attackers can alter visitor identifiers to retrieve sensitive personal information of other users. Furthermore, due to the lack of request rate limits on the HID SAFE Web Server, this vulnerability can also be exploited to mount denial-of-service attacks, potentially disrupting service availability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References