CVE-2023-49233

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of configured credentials and potentially elevate their privileges to administrator level.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published: Sep 3, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-492346.3An XML external entity (XXE) vulnerability was found in Stilog Visual Planning 8. It allows an authenticated attacker to access local server CVE-2023-492359.8An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Filtering of debug information is mishandled durin CVE-2023-492369.8A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occu CVE-2023-492379.8An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur because the system function is used by dav CVE-2023-492389.8In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) b CVE-2023-492397.5Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidenti CVE-2023-49244.3The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to missing capability c CVE-2023-492407.5Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-492417.5API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service conf CVE-2023-492427.5Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidential CVE-2023-492437.5Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerability may affect serv CVE-2023-492447.5Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiali