CVE-2023-45596

Summary

CVE-2023-45596 is a newly disclosed vulnerability affecting the AiLux imx6 bundle below version imx6_1.0.7-2. This issue, classified as a CWE-862 "Missing Authorization" vulnerability, allows unauthenticated attackers to gain access to confidential configuration files through the "file_configuration" functionality of the web application. The flaw puts sensitive information at risk of exposure and potential exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.