← back
CVE-2023-3048

IDOR in TMT's Lockcell

CVSS 9.8 CRITICALEPSS 1.3%CWE-639
Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
TMT · Lockcell
public PoCs found — 1
cve_referencefordefence.com/cve-2023-3048-authorization-bypass-through-user-controlled-key-vulnerability-allows-authentication-abuse-authentication-bypass/unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://fordefence.com/cve-2023-3048-authorization-bypass-through-user-controlled-key-vulnerability-allows-authentication-abuse-authentication-bypass/https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0345https://www.usom.gov.tr/bildirim/tr-23-0345