{"id":"CVE-2023-5913","state":"PUBLISHED","title":"A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.","description":"Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.\n\n","publishedAt":"2023-11-08T16:42:31.074Z","updatedAt":"2024-09-04T13:53:22.231Z","severity":{"score":8.2,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","source":"OpenText"},"assigner":"OpenText","products":["opentext Fortify ScanCentral DAST"],"affected":[{"vendor":"opentext","product":"Fortify ScanCentral DAST","defaultStatus":"unaffected","versions":[{"version":"21.1","status":"affected"},{"version":"21.2","status":"affected"},{"version":"21.2.1","status":"affected"},{"version":"22.1","status":"affected"},{"version":"22.1.1","status":"affected"},{"version":"22.2","status":"affected"},{"version":"23.1","status":"affected"}]}],"references":["https://portal.microfocus.com/s/article/KM000023500?language=en_US"],"weaknesses":["CWE-266"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/5xxx/CVE-2023-5913.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-5913","state":"PUBLISHED","datePublished":"2023-11-08T16:42:31.074Z","dateUpdated":"2024-09-04T13:53:22.231Z","assignerShortName":"OpenText","assignerOrgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateReserved":"2023-11-01T22:02:30.314Z"},"containers":{"cna":{"title":"A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.","descriptions":[{"lang":"en","value":"Incorrect Privilege Assignment vulnerability in opentext Fortify ScanCentral DAST. The vulnerability could be exploited to gain elevated privileges.This issue affects Fortify ScanCentral DAST versions 21.1, 21.2, 21.2.1, 22.1, 22.1.1, 22.2, 23.1.\n\n"}],"affected":[{"vendor":"opentext","product":"Fortify ScanCentral DAST","defaultStatus":"unaffected","versions":[{"version":"21.1","status":"affected"},{"version":"21.2","status":"affected"},{"version":"21.2.1","status":"affected"},{"version":"22.1","status":"affected"},{"version":"22.1.1","status":"affected"},{"version":"22.2","status":"affected"},{"version":"23.1","status":"affected"}]}],"references":[{"url":"https://portal.microfocus.com/s/article/KM000023500?language=en_US"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-266","description":"CWE-266 Incorrect Privilege Assignment","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"OpenText","orgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateUpdated":"2023-11-08T16:42:31.074Z"},"impacts":[{"descriptions":[{"lang":"en","value":"Could lead to gaining elevated privileges"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"\n\n<a target=\"_blank\" rel=\"nofollow\" href=\"https://portal.microfocus.com/s/article/KM000023500?language=en_US\">portal.microfocus.com/s/article/KM000023500?language=en_US</a>\n\n<br>"}],"value":"\n portal.microfocus.com/s/article/KM000023500?language=en_US https://portal.microfocus.com/s/article/KM000023500 \n\n\n"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://portal.microfocus.com/s/article/KM000023500?language=en_US","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T08:14:24.622Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-04T13:51:53.335836Z","id":"CVE-2023-5913","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-266","type":"CWE","lang":"en","description":"CWE-266 Incorrect Privilege Assignment"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-04T13:53:22.231Z"}}]}}}