COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2023-33668

CVE-2023-33668

Severity
critical
Source
NVD · cve
Published
2023-07-12
CVSS
9.8
Reference
https://nvd.nist.gov/vuln/detail/CVE-2023-33668
shame 35/100

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers.

Players implicated

digiexam · vendordigiexam · product

Description

DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.