CVE-2023-29656

MEDIUM

Darktrace Threat Visualizer 6.0.0-6.0.14 - Incorrect Authorization

Title source: llm
STIX 2.1

Description

An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actions(block/unblock traffic) from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress traffic in the entire infrastructure where darktrace agents are deployed.

References (2)

Core 2
Core References
Exploit, Third Party Advisory
https://ramihub.github.io/

Scores

CVSS v3 6.1
EPSS 0.0025
EPSS Percentile 15.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-863
Status published
Products (1)
darktrace/threat_visualizer 6.0.0 - 6.0.15
Published Jul 06, 2023
Tracked Since Feb 18, 2026