CVE-2023-36483 | BDVDB-2026-227680 Detail
MAS (a Carrier brand)MASmobile Classic
Description#
Authorization bypass can be achieved by session ID prediction in MASmobile Classic Android version 1.16.18 and earlier and MASmobile Classic iOS version 1.7.24 and earlier which allows remote attackers to retrieve sensitive data including customer data, security system status, and event history.
Impact#
CAPEC-59 Session Credential Falsification through Prediction
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.