Critical · 9.8 CVE-2023-49232 EUVD-2023-53235GHSA-x9pr-7qrq-58vq

An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to brute-force the pass…

Published Mar 29, 2024 · Updated Mar 25, 2025 · Assigned by mitre

Description

An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to brute-force the password reset PINs of administrative users.

References

https://www.visual-planning.com/en/support-portal/updates
https://www.schutzwerk.com/blog/schutzwerk-sa-2023-004/
https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-004.txt
20240405 SCHUTZWERK-SA-2023-004: Authentication Bypass via Password Reset Functionality in Visual Planning mailing-list