CVE Catalog

CVE-2023-3050

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.31%

67th percentile - higher than 67% of all known CVEs

Summary

The vulnerability in TMT Lockcell relies on cookies without validation and integrity checking, allowing privilege abuse and authentication bypass.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially leading to serious security breaches.

Recommendation

It is recommended to implement cookie validation and integrity checking mechanisms to protect against abuse.

Original NVD description (English source)

Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass. This issue affects Lockcell: before 15.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS