Vulnerabilities > CVE-2023-28900 - Unspecified vulnerability in Skoda-Auto Skoda Connect
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |