Vulnerabilities > CVE-2023-38335 - Unspecified vulnerability in Omnis Studio 10.22.00

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
omnis
NVD
Published: 2023-07-20
Updated: 2024-11-21

Summary

Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always private" Omnis libraries can be opened by the Omnis Studio browser by bypassing specific checks. This violates the expected behavior of an "irreversible operation".

Vulnerable Configurations

Part Description Count
Application
Omnis
1

References