module
Control iD iDSecure Authentication Bypass (CVE-2023-6329)
| Disclosed |
|---|
| Nov 27, 2023 |
Disclosed
Nov 27, 2023
Description
This module exploits an improper access control vulnerability (CVE-2023-6329) in Control iD iDSecure unauthenticated remote attacker to compute valid credentials and to add a new administrative user to the web interface of the product.
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.