CVE-2023-27001

Published: Feb 8, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

An issue discovered in Egerie Risk Manager v4.0.5 allows attackers to bypass the signature mechanism and tamper with the values inside the JWT payload resulting in privilege escalation.

Affected (1)

Products: Egerie: Egerie

Egerie

1 product

Egerie

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Egerie Egerie	Version 4.0.5

References (2)

https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2023-27001.pdf

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2023-27001.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.