Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-36483

MAS (a Carrier brand) MASmobile Classic Authorization Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Carrier

Description

Authorization bypass can be achieved by session ID prediction in MASmobile Classic Android  version 1.16.18 and earlier and MASmobile Classic iOS version 1.7.24 and earlier which allows remote attackers to retrieve sensitive data  including customer data, security system status, and event history.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MAS (a Carrier brand) MASmobile Classic

Default version status: unaffected

  • 1 to ≤ 1.16.18affected

MAS (a Carrier brand) MASmobile Classic

Default version status: unaffected

  • 1 to ≤ 1.7.24affected

MAS (a Carrier brand) MAS ASP.Net Services

Default version status: unaffected

  • 1 to ≤ 1.9affected

References