Vulnerability Description
A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation of the argument Server leads to improper authentication. It is possible to initiate the attack remotely. Upgrading to version 7.2 SP4 and 2021.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-243729 was assigned to this vulnerability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Documentlocator | Document Locator | < 7.2 |
Related Weaknesses (CWE)
References
- https://vuldb.com/?ctiid.243729Permissions Required
- https://vuldb.com/?id.243729Third Party Advisory
- https://vuldb.com/?ctiid.243729Permissions Required
- https://vuldb.com/?id.243729Third Party Advisory
FAQ
What is CVE-2023-5830?
CVE-2023-5830 is a vulnerability with a CVSS score of 7.3 (HIGH). A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation o...
How severe is CVE-2023-5830?
CVE-2023-5830 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-5830?
Check the references section above for vendor advisories and patch information. Affected products include: Documentlocator Document Locator.