Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2023-47247
CVE-2023-47247:
SysAid Server vulnerability analysis and mitigation
Overview
In SysAid On-Premise before version 23.3.34, a vulnerability was discovered where an end user could delete a Knowledge Base article in certain edge cases. This vulnerability is tracked as CVE-2023-47247 and is also referenced internally as bug 15102. The issue was disclosed on December 25, 2023 (CVE Details).
Technical details
The vulnerability has been assigned a CVSS v3.1 base score of 4.3 (MEDIUM) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. This indicates that the vulnerability requires low attack complexity, requires low privileges to exploit, and can be triggered without user interaction. The impact primarily affects the integrity of the system (NVD).
Impact
The vulnerability allows unauthorized deletion of Knowledge Base articles, which could lead to loss of important documentation and information resources. The CVSS scoring indicates that while there is no direct impact on confidentiality or availability, there is a low impact on the integrity of the system (NVD).
Mitigation and workarounds
The vulnerability has been fixed in SysAid On-Premise version 23.3.34. Organizations running affected versions should upgrade to version 23.3.34 or later to address this security issue (Release Notes).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management