CVE-2023-6523

High

Published: 05/04/2024(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2023-6523 is a vulnerability in Extreme XDS that allows authorization bypass through a user-controlled key, leading to authentication abuse.

Risk Assessment

Authentication abuse may lead to unauthorized access to system resources, posing a significant security threat to the organization.

Recommendation

It is recommended to update Extreme XDS to version 3914 or later to mitigate this vulnerability.

Other vulnerabilities in Extreme XDS

CVE-2023-6522High
CVE-2023-6522 is a vulnerability related to incorrect use of privileged APIs in ExtremePacs Extreme XDS, allowing the collection of user-provided data. This issue affects Extreme XDS versions before 3914.

Original NVD description (English source)

Authorization Bypass Through User-Controlled Key vulnerability in ExtremePacs Extreme XDS allows Authentication Abuse. This issue affects Extreme XDS: before 3914.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS