medium6.5
CVE-2023-33368
Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these API routes.
Impact
Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these API routes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Assaabloy | Control Id Idsecure | through 4.7.26.0 |