CVE-2023-3048
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk67th percentile - higher than 67% of all known CVEs
Summary
The vulnerability in TMT Lockcell allows authorization bypass through a user-controlled key, leading to authentication abuse and the ability to bypass authentication.
Risk Assessment
Organizations may be exposed to unauthorized access to systems, potentially leading to serious security breaches.
Recommendation
It is recommended to update Lockcell to version 15 or later to mitigate this vulnerability.
Other vulnerabilities in TMT Lockcell
See all- CVE-2023-3049Critical
CVE-2023-3049 vulnerability in TMT Lockcell allows unrestricted upload of files with dangerous types, leading to command injection.
- CVE-2023-3047Critical
CVE-2023-3047 describes an improper neutralization of special elements used in SQL commands, leading to SQL Injection vulnerabilities in TMT Lockcell.
Original NVD description (English source)
Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15.