CVE-2023-49231

Description

An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administrative API token.

References

• https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-53234
• https://www.visual-planning.com/en/support-portal/updates
• https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-003.txt
• https://www.schutzwerk.com/blog/schutzwerk-sa-2023-003/
• http://seclists.org/fulldisclosure/2024/Apr/1