CVE-2023-2959

High

Published: 17/07/2023(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2023-2959 is a vulnerability in Oliva Expertise EKS that allows authentication bypass due to a primary weakness before version 1.2. This enables the collection of user-provided data without proper authorization.

Risk Assessment

Organizations using Oliva Expertise EKS may be exposed to unauthorized access to user data, potentially leading to information leaks and privacy violations.

Recommendation

It is recommended to upgrade Oliva Expertise EKS to version 1.2 or later to mitigate this vulnerability and secure the system against unauthorized access.

Other vulnerabilities in Oliva Expertise EKS

CVE-2023-2963Critical
CVE-2023-2963 describes an improper neutralization of special elements used in SQL commands, allowing for SQL Injection in Oliva Expertise EKS versions before 1.2.

Original NVD description (English source)

Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users. This issue affects Oliva Expertise EKS: before 1.2.