High · 8.1 CVE-2023-47294 EUVD-2023-51421GHSA-v665-p978-cg4j

An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete use…

Published Jun 23, 2025 · Updated Jun 26, 2025 · Assigned by mitre

Description

An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, lock, and delete user accounts via a crafted session cookie.

References

https://drive.google.com/file/d/1owG3_2oVpoCb34Mb7nCYZNrjW8cFxpzN/view?usp=sharing
https://github.com/pwahba/cve-research/blob/main/CVE-2023-47294/CVE-2023-47294.md