Skip to content
OpenAdvisories
Unscored CVE-2023-29656 EUVD-2023-33196GHSA-83q5-ph4f-qx3w

An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users t…

Published Jul 6, 2023 · Updated Nov 19, 2024 · Assigned by mitre

Description

An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actions(block/unblock traffic) from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress traffic in the entire infrastructure where darktrace agents are deployed.

References