CVE-2023-43901: High severity eMudhra EMSigner vulnerability
Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-43901.
What is the title of the vulnerability?
The title of the vulnerability is 'Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated a…'
What is the impact of this vulnerability?
This vulnerability allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.
Which software version is affected by this vulnerability?
Emsigner version 2.8.7 is affected by this vulnerability.
What is the severity of CVE-2023-43901?
The severity of CVE-2023-43901 is medium with a severity value of 5.9.
How can I fix this vulnerability?
To fix this vulnerability, update EMSigner to a version that addresses the incorrect access control issue.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at https://secpro.llc/EMSigner-CVE-1/