CVE-2023-2702 : Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authe

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.This issue affects Competition Management System: before 23.07.

Published 2023-05-23 20:15:10

Updated 2023-05-30 21:48:56

Source Computer Emergency Response Team of the Republic of Turkey

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2023-2702

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 28 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-2702

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	Computer Emergency Response Team of the Republic of Turkey
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-2702

CWE-639 Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Assigned by: cve@usom.gov.tr (Primary)

Products affected by CVE-2023-2702

Finexmedia » Competition Management System
Versions before (<) 23.07
cpe:2.3:a:finexmedia:competition_management_system:*:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2023-2702

Exploit prediction scoring system (EPSS) score for CVE-2023-2702

CVSS scores for CVE-2023-2702

CWE ids for CVE-2023-2702

References for CVE-2023-2702

Products affected by CVE-2023-2702