CVE-2023-3305 – C-DATA Web Management System User Creation access control

https://notcve.org/view.php?id=CVE-2023-3305

A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. • https://github.com/sleepyvv/vul_report/blob/main/C-data/BrokenAccessControl.md https://vuldb.com/?ctiid.231801 https://vuldb.com/?id.231801 • CWE-284: Improper Access Control •