1. Home
  2. CVE Database
  3. CVE-2023-43901
MEDIUM · 5.9

CVE-2023-43901

Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered u...

Vulnerability Description

Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
EmsignerEmsigner2.8.7

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2023-43901?

CVE-2023-43901 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered u...

How severe is CVE-2023-43901?

CVE-2023-43901 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-43901?

Check the references section above for vendor advisories and patch information. Affected products include: Emsigner Emsigner.