Description
Improper authorisation of regular users in ProIntegra Uptime DC software (versions below 2.0.0.33940) allows them to change passwords of all other users including administrators leading to a privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ProIntegra | UptimeDC | < 2.0.0.33940 | 2.0.0.33940 |
References
- https://cert.pl/posts/2023/10/CVE-2023-4997/ third-party-advisory
- https://cert.pl/en/posts/2023/10/CVE-2023-4997/ third-party-advisory