CVE-2023-38335

MITTEL 5.3CVE-2023-38335 · Published 20/07/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-38335 ist eine Schwachstelle (MITTEL (CVSS 5.3)) in studio (omnis).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.2%, höher als bei 69.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
studio omnis	`= 10.22.00`	No fix yet

Description

Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always private" Omnis libraries can be opened by the Omnis Studio browser by bypassing specific checks. This violates the expected behavior of an "irreversible operation".

References

packetstormsecurity.com/files/173695/Omnis-Studio-10.22.00-Library-Setting-Bypass.html · Exploit
seclists.org/fulldisclosure/2023/Jul/41 · Exploit
seclists.org/fulldisclosure/2023/Jul/43 · Not Applicable
syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-005.txt · Third Party Advisory

Weitere Schwachstellen in studio

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free