Security Advisory

CVE-2023-6342

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-11-30 17:41:13

Last updated 2024-10-15 17:41:05

Assigner cisa-cg

CVSS score 5.3

State PUBLISHED

Description

Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint_CM/Redirector.ashx?userid=' parameters. The vulnerable "pay for print" feature was removed on or around 2023-11-01.

← Browse all CVEs View on cve.org ↗