Vulnerabilities > CVE-2023-47316 - Authorization Bypass Through User-Controlled Key vulnerability in H-Mdm Headwind MDM 5.22.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control. The Web panel allows users to gain access to potentially sensitive API calls such as listing users and their data, file management API calls and audit-related API calls.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |