VULNERABILITY INTELLIGENCE

CVE-2023-23344

CVSS score3 LOW
EPSS probability0.42%
CISA KEVNot currently listed
Published2023-06-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page.

Weakness classification

  • CWE-276: Incorrect Default Permissions
  • CWE-862: Missing Authorization

Primary references