CVE Catalog

CVE-2023-39979

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.74%

50th percentile - higher than 50% of all known CVEs

Summary

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.

Risk Assessment

The organization may be exposed to unauthorized access to the system, potentially leading to data loss or security breaches.

Recommendation

It is recommended to update MXsecurity to version 1.0.1 or later to mitigate this vulnerability.

Original NVD description (English source)

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.  

Vulnerability data from NVD (NIST) · CISA KEV · EPSS