ID CVE-2023-36100
Summary An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter in api/User/ChangeUser.
References
Vulnerable Configurations
  • cpe:2.3:a:macwk:icecms:2.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:macwk:icecms:2.0.1:*:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 01-10-2024 - 17:35
Published 01-09-2023 - 16:15
Last modified 01-10-2024 - 17:35
Back to Top