CVE-2023-4665

High

Published: 15/09/2023(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2023-4665 describes an incorrect execution-assigned permissions vulnerability in Saphira Connect that allows privilege escalation.

Risk Assessment

Organizations using Saphira Connect versions prior to 9 may be exposed to unauthorized access to elevated privileges, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade Saphira Connect to version 9 or later to mitigate this vulnerability.

Other vulnerabilities in Saphira Connect

See all

CVE-2023-4662Critical
A vulnerability in Saphira Connect allows Remote Code Inclusion with unnecessary privileges. This issue affects Saphira Connect versions before 9.
CVE-2023-4661Critical
CVE-2023-4661 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in Saphira Connect versions before 9.

Original NVD description (English source)

Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects Saphira Connect: before 9.