1. Home
  2. CVE Database
  3. CVE-2023-48641
HIGH · 7.5

CVE-2023-48641

Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially explo...

Vulnerability Description

Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user requests to bypass authorization checks, in order to gain execute access to AWF application resources.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
ArcherirmArcher< 6.14.0.1.2

Related Weaknesses (CWE)

CWE-639

References

FAQ

What is CVE-2023-48641?

CVE-2023-48641 is a vulnerability with a CVSS score of 7.5 (HIGH). Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially explo...

How severe is CVE-2023-48641?

CVE-2023-48641 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-48641?

Check the references section above for vendor advisories and patch information. Affected products include: Archerirm Archer.