CVE-2023-6483criticalCWE-287

CVE-2023-6483: critical vulnerability in ADiTaaS Allied Digital Integrated…

Improper Authentication Vulnerability in ADiTaaS

Published · Updated

Follow this CVE+ Monitor Allied Digital Integrated Tool-as-a-Service

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 1.2%
The vulnerability exists in ADiTaaS (Allied Digital Integrated Tool-as-a-Service) version 5.1 due to an improper authentication vulnerability in the ADiTaaS backend API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable platform. Successful exploitation of this vulnerability could allow the attacker to gain full access to the customers’ data and completely compromise the targeted platform.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
ADiTaaS · Allied Digital Integrated Tool-as-a-Service