high7.5
CVE-2023-27243
An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API.
Impact
An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Makves | Dcap | Versions 3.0.0.122, 3.0.0.183 |