HCL Unica Platform is vulnerable to a privilege escalation by unauthorized group assignation

CVE-2023-37498

Summary

A weakness exists in HCL Software products that permits users to elevate their privileges by leveraging a POST request initially intended for administrative use. By reusing this request, malicious actors could assign themselves to unauthorized groups, potentially compromising system integrity and access controls.

References