CVE Catalog

CVE-2023-2882

Critical
Published: Translated: NVD NIST

Summary

The vulnerability in CBOT Chatbot related to the generation of incorrect security tokens allows for token impersonation and privilege abuse.

Risk Assessment

The organization may be exposed to unauthorized access to resources and privilege abuse by third parties.

Recommendation

It is recommended to update the Chatbot to a version that is not vulnerable to this issue to minimize risk.

Original NVD description (English source)

Generation of Incorrect Security Tokens vulnerability in CBOT Chatbot allows Token Impersonation, Privilege Abuse. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS