Vulnerability Database

301,050

Total vulnerabilities in the database

CVE-2023-47316

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to potentially sensitive API calls such as listing users and their data, file management API calls and audit-related API calls.

  • Published: Nov 22, 2023
  • Updated: Dec 1, 2023
  • CVE: CVE-2023-47316
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
h-mdm / headwind_mdm 5.22.1 5.22.1.x