Privilege Escalation Vulnerability in FileMaker Server Could Expose Sensitive Information

CVE-2023-42954

What is CVE-2023-42954?

A privilege escalation issue within FileMaker Server can potentially expose sensitive information to front-end websites when users are logged into the Admin Console as administrators. The vulnerability allows for unauthorized access to sensitive data, thus posing a significant risk to the confidentiality of information managed by the server. This issue has been addressed in version 20.3.1 of FileMaker Server by implementing measures that reduce the amount of information transmitted in requests, enhancing the overall security posture of the application.

References