CRITICAL🇬🇧 English

CVE-2023-4702

CVSS 9.8v3.1pub. 2023-09-14upd. 2026-05-21

Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass. This issue affects Digital Yepas: before 1.0.1.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Yepas Digital Yepas
APP
Yepas
< 1.0.1

🔵

ZWERYFIKUJ U PRODUCENTA

Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.

Tagi

Auth Bypass

CWE

CWE-288

CWE-306

Referencje

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-…

www.usom.gov.tr/bildirim/tr-23-0526…

Powiązane podatności

CVE-2023-4972CRITICAL9.8ten sam produkt

Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users...