CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2023-6451
High (7.5) in alayacare procura. EPSS 0.5% chance of exploitation in the next 30 days.
Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the application's authentication mechanisms.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-287, CWE-1394
- Published
- Modified
- Record from
- the NVD, synced
Affected
- alayacare:procura