Critical · 9.8 CVE-2023-49231 EUVD-2023-53234GHSA-vpp6-9fcm-rv58

An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administr…

Published Mar 29, 2024 · Updated Oct 28, 2024 · Assigned by mitre

Description

An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administrative API token.

References

https://www.visual-planning.com/en/support-portal/updates
https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-003.txt
https://www.schutzwerk.com/blog/schutzwerk-sa-2023-003/
20240405 SCHUTZWERK-SA-2023-003: Authentication Bypass in Visual Planning REST API mailing-list