Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-25834 EUVD-2023-29722GHSA-qj6g-3fwx-29q3

BUG-000142922 Incomplete permission changes in specific cases.

Published May 9, 2023 · Updated Apr 10, 2025 · Assigned by Esri

Description

Changes to user permissions in Portal for ArcGIS 10.9.1 and below are incompletely applied in specific use cases. This issue may allow users to access content that they are no longer privileged to access.

Affected products

VendorProductAffectedFixed
Esri Portal for ArcGIS all – ≤ 10.9.1 —

References