Vulnerabilities > CVE-2023-29656 - Incorrect Authorization vulnerability in Darktrace Threat Visualizer
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
LOW Availability impact
HIGH Summary
An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to control "antigena" actions(block/unblock traffic) from the mobile application. This vulnerability could create a "shutdown", blocking all ingress or egress traffic in the entire infrastructure where darktrace agents are deployed.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |