CVE-2023-49617
CVSS 3.1 Score 9.1 of 10 (high)
Details
Published Feb 1, 2024
Updated: Aug 2, 2024
CWE ID 306
Summary
CVE-2023-49617 exposes a vulnerability in the MachineSense API, where authentication is lacking. This issue allows unauthenticated remote attackers to gain access, potentially retrieving and modifying sensitive information. The absence of proper authentication protections poses a significant risk to the affected system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share