CVE-2023-27243: High severity Makves DCAP vulnerability
Published Jun 21, 2023
·Updated
An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API.
Affected Software
2 affected components
Makves DCAP=3.0.0.122
Makves DCAP=3.0.0.183
Event History
Jun 21, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-27243?
CVE-2023-27243 is considered a high severity vulnerability due to the risk of exposing cleartext credentials to unauthenticated attackers.
2
How do I fix CVE-2023-27243?
To mitigate CVE-2023-27243, ensure proper access controls are implemented on the Makves DCAP API to prevent unauthorized access.
3
What versions are affected by CVE-2023-27243?
CVE-2023-27243 affects Makves DCAP versions 3.0.0.122 and 3.0.0.183.
4
What type of issue is CVE-2023-27243?
CVE-2023-27243 is an access control issue that allows attackers to gain unauthorized access to sensitive information.
5
What data can be exposed due to CVE-2023-27243?
CVE-2023-27243 can allow unauthorized users to obtain cleartext credentials through crafted web requests.