CVE-2023-23957

An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4

Score

CVSS 3.1 5.4 Medium

Status

Modified - secure@symantec.com

Published

2023-09-19

Last modified

2024-09-25

Weaknesses

CWE-601

Affected products

• Identity Portal (Symantec)
• Symantec Identity Governance And Administration (Symantec - A Division Of Broadcom)

References

• https://support.broadcom.com/external/content/SecurityAdvisories/0/22544