CVE Catalog
CVE-2023-3033
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk0.60%
44th percentile - higher than 44% of all known CVEs
Summary
The Mobatime web application has an incorrect authorization vulnerability that allows privilege escalation through incorrectly configured access control security levels.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive data or functions, potentially leading to serious security breaches.
Recommendation
It is recommended to review and improve the configuration of access control security levels in the Mobatime application to prevent privilege escalation.
Original NVD description (English source)
Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web application: through 06.7.22.