CVE-2023-43900: Medium severity eMudhra EMSigner vulnerability
Insecure Direct Object References (IDOR) in eMudhra emSigner v2.8.7 allow authenticated attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-43900.
What is the severity of CVE-2023-43900?
The severity of CVE-2023-43900 is medium with a CVSS score of 6.5.
What is Insecure Direct Object References (IDOR)?
Insecure Direct Object References (IDOR) is a vulnerability where an attacker can access unauthorized resources by manipulating object references.
How can attackers exploit Insecure Direct Object References (IDOR) in EMSigner v2.8.7?
Attackers can exploit Insecure Direct Object References (IDOR) in EMSigner v2.8.7 by manipulating the documentID and EncryptedDocumentId parameters to gain unauthorized access to application content and view sensitive data of other users.
Is there a fix available for this vulnerability?
It is recommended to update EMSigner to version 2.8.8 or later to fix the Insecure Direct Object References (IDOR) vulnerability.