CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2023-33368
Medium (6.5) in assaabloy control id idsecure. EPSS 0.5% chance of exploitation in the next 30 days.
Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these API routes.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWE
- CWE-668
- Published
- Modified
- Record from
- the NVD, synced
Affected
- assaabloy:control_id_idsecure