CVE-2023-38335

Summary

CVE-2023-38335: Omnis Studio 10.22.00 contains a misconfigured access control issue. Contrary to its intended design, "always private" Omnis libraries can be accessed by the Omnis Studio browser, despite the feature being marketed as irreversible. This unexpected behavior poses a security risk, allowing unauthorized access to supposedly private libraries.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.