CVE Catalog
CVE-2023-34797
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.43%
34th percentile - higher than 34% of all known CVEs
Summary
There is a broken access control in the Registration page (/Registration.aspx) of Termenos CWX v8.5.6 that allows attackers to access sensitive information.
Risk Assessment
The access control vulnerability may lead to the exposure of confidential data, posing a serious threat to the organization's security.
Recommendation
It is recommended to immediately implement fixes in the access control on the registration page and conduct a security audit.
Original NVD description (English source)
Broken access control in the Registration page (/Registration.aspx) of Termenos CWX v8.5.6 allows attackers to access sensitive information.