CVE-2023-27195

State: Published
Severity: 9.8 Critical
Published: Nov 8, 2024
Updated: Nov 8, 2024
Reserved: Feb 27, 2023

Description

Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code was used to create an Administrator account, attackers are also able to register new Administrator accounts with full privileges.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-276 Incorrect Default Permissions

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://transportation.trimble.com/products/TM4Web
https://seclists.org/fulldisclosure/2024/Apr/16
http://seclists.org/fulldisclosure/2024/Apr/16

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.