Beveiligingsadvies

CVE-2023-6342

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-30 17:41:13
Laatst bijgewerkt 2024-10-15 17:41:05
Toegewezen door cisa-cg
CVSS-score 5.3
Status PUBLISHED

Beschrijving

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint_CM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01.