Unauthorized Access to Sensitive Functionality via Inadequate ACLs

CVE-2023-41918

What is CVE-2023-41918?

A vulnerability exists within an affected vendor's product that permits unauthorized access to certain functionalities which are not properly constrained by access control lists (ACLs). This flaw could be exploited by attackers to execute commands without authentication, potentially leading to unauthorized manipulation of data, access to privileged functions, or arbitrary code execution. Users of the affected versions should take immediate precautions to mitigate risks associated with this vulnerability.

References