CVE-2023-49961

HIGH

WALLIX Bastion 7.x-10.x and Access Manager 3.x-4.x - Improper Access Control

Title source: llm
STIX 2.1

Description

WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead to sensitive data exposure.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0044
EPSS Percentile 35.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-284
Status published
Products (2)
wallix/bastion 7.0.0 - 9.0.10
wallix/bastion_access_manager 3.0.0 - 4.0.3
Published Jan 08, 2024
Tracked Since Feb 18, 2026