CVE-2023-41264

Summary

CVE-2023-41264 is a vulnerability affecting the Netwrix Usercube software before version 6.0.215. In certain misconfigured on-premises installations, this issue enables authentication bypass on deployment endpoints, potentially allowing privilege escalation. The vulnerability is triggered when the configuration fails to include the necessary restSettings.AuthorizedClientId and restSettings.AuthorizedSecret fields for the POST /api/Deployment/ExportConfiguration and POST /api/Deployment endpoints. This security weakness could be exploited by an attacker to gain unauthorized access and elevated privileges, posing a significant risk to affected systems. It is essential for organizations using Netwrix Usercube to update to the latest version or implement the missing security fields to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.