CVE-2023-50327
EUVD-2023-5513202.02.2024, 01:15
IBM PowerSC 1.3, 2.0, and 2.1 uses insecure HTTP methods which could allow a remote attacker to perform unauthorized file request modification. IBM X-Force ID: 275109.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ibm | powersc | 1.3 |
| ibm | powersc | 2.0 |
| ibm | powersc | 2.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-650 - Trusting HTTP Permission Methods on the Server SideThe server contains a protection mechanism that assumes that any URI that is accessed using HTTP GET will not cause a state change to the associated resource. This might allow attackers to bypass intended access restrictions and conduct resource modification and deletion attacks, since some applications allow GET to modify state.
- CWE-436 - Interpretation ConflictProduct A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.