1. Home
  2. CVE Database
  3. CVE-2023-43902
CRITICAL · 9.8

CVE-2023-43902

Incorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privile...

Vulnerability Description

Incorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
EmsignerEmsigner2.8.7

Related Weaknesses (CWE)

CWE-276

References

FAQ

What is CVE-2023-43902?

CVE-2023-43902 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Incorrect access control in the Forgot Your Password function of EMSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privile...

How severe is CVE-2023-43902?

CVE-2023-43902 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-43902?

Check the references section above for vendor advisories and patch information. Affected products include: Emsigner Emsigner.