CVE-2023-24468

CRITICAL

Advanced Authentication <6.4.1.1-6.3.7.2 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0067
EPSS Percentile 71.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-284
Status published
Products (3)
microfocus/netiq_advanced_authentication 6.3 (12 CPE variants)
microfocus/netiq_advanced_authentication 6.4 (2 CPE variants)
microfocus/netiq_advanced_authentication < 6.3
Published Mar 15, 2023
Tracked Since Feb 18, 2026