Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2023-45083

HyperCloud: "admin" and "serveradmin" users can be deleted

Description

An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane. An authenticated admin-level user may be able to delete the "admin" or "serveradmin" users, which prevents authentication from subsequently succeeding. This issue affects HyperCloud versions 1.0 to any release before 2.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SoftIron HyperCloud

Default version status: unaffected

  • 1.0 to < 2.1affected

References