CVE-2023-23192
HIGHIS Decisions UserLock MFA 11.01 - Authentication Bypass via Scheduled Task
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-23192. PoCs published by pinarsadioglu.
AI-analyzed exploit summary The repository describes a vulnerability in Userlock MFA where an attacker with administrative privileges can bypass MFA by creating a scheduled task that executes at logon. The exploit leverages the Windows Task Scheduler to execute commands before MFA is enforced.
Description
IS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task.
Exploits (1)
The repository describes a vulnerability in Userlock MFA where an attacker with administrative privileges can bypass MFA by creating a scheduled task that executes at logon. The exploit leverages the Windows Task Scheduler to execute commands before MFA is enforced.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H