CVE-2023-21409 HIGH

CVE-2023-21409: Insufficient file permissions leak administrator-privileged credentials in AXIS License Verifier ACAP

Vendor Axis Communications Ab
Product AXIS License Plate Verifier
Published August 3, 2023
Last update October 17, 2024
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application.

Key dates

02Disclosure timeline

August 3, 2023 CVE published
October 17, 2024 Record updated