Security Advisory

CVE-2023-3285

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-09 09:37:24

Last updated 2024-08-02 06:48:08

Assigner palo_alto

State PUBLISHED

Description

A BOLA vulnerability in POST /appointments allows a low privileged user to create an appointment for any user in the system (including admin). This results in unauthorized data manipulation.

← Browse all CVEs View on cve.org ↗