CVE-2023-33370

概要

参考情報

• claroty.com/team82/disclosure-dashboard/cve-2023-33370 · Third Party Advisory
• controlid.com.br/en/access-control/idsecure · Vendor Advisory

control id idsecure のその他の脆弱性

• CVE-2025-49853緊急 9.1ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary …
• CVE-2025-49852高 7.5ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow a…
• CVE-2025-49851緊急 9.8ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an a…
• CVE-2023-33367緊急 9.8A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the…
• CVE-2023-33371緊急 9.8Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens, allowing attackers…