CVE-2023-5913 HIGH

CVE-2023-5913: A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.

Vendor Opentext
Product Fortify ScanCentral DAST
Weakness CWE-266
Published November 8, 2023
Last update September 4, 2024

CVSS base score

8.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.

Key dates

02Disclosure timeline

November 8, 2023 CVE published
September 4, 2024 Record updated