Security Advisory

CVE-2023-38335

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-07-20 00:00:00

Last updated 2024-10-24 20:28:58

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always private" Omnis libraries can be opened by the Omnis Studio browser by bypassing specific checks. This violates the expected behavior of an "irreversible operation".

← Browse all CVEs View on cve.org ↗