Description
Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.
Published: 2023-11-14
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-48261 Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.
History

Fri, 28 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Description Incorrect access control in the AdHoc User creation form of EMSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user. Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify usernames and privileges by using the email address of a registered user.
References

Fri, 28 Aug 2026 08:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284 CWE-863
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L'}

Thu, 27 Aug 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Emudhra
Emudhra emsigner
CPEs cpe:2.3:a:emsigner:emsigner:2.8.7:*:*:*:*:*:*:* cpe:2.3:a:emudhra:emsigner:2.8.7:*:*:*:*:*:*:*
Vendors & Products Emsigner
Emsigner emsigner
Emudhra
Emudhra emsigner
Metrics cvssV3_1

{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N'}

 cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

Tue, 03 Sep 2024 17:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Subscriptions

Emudhra Emsigner
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-28T13:58:36.985Z

Reserved: 2023-09-25T00:00:00.000Z

Link: CVE-2023-43901

cve-icon Vulnrichment

Updated: 2024-08-02T19:52:11.866Z

cve-icon NVD

Status : Modified

Published: 2023-11-14T05:15:08.767

Modified: 2026-08-28T16:16:49.490

Link: CVE-2023-43901

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses