CVE-2023-38422

Summary

CVE-2023-38422: Walchem Intuition 9's management web server API lacks authentication in certain routes, prior to version 4.21. This vulnerability exposes sensitive data to potential attackers, enabling them to download and export it without proper authorization. This oversight could lead to significant data breaches if not mitigated promptly. Organizations running affected versions should update their firmware or implement alternative security measures to protect their data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.