CVE-2023-42231

CVE-2023-42231 is an Incorrect Access Control vulnerability (CWE-281) affecting Pat Infinite Solutions HelpdeskAdvanced versions up to and including 11.0.33. The issue allows low-privileged users to delete administrator accounts by sending a specially crafted request to the "WSCView/Delete" function. It has a CVSS v3.1 base score of 8.1 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H), indicating high severity due to network accessibility, low attack complexity, and significant impacts on integrity and availability.

A low-privileged user with valid credentials can exploit this vulnerability remotely without user interaction. By targeting the "WSCView/Delete" endpoint, the attacker can delete admin users, potentially leading to denial of service for administrative functions and unauthorized disruption of access controls.

The primary reference for advisories is available at https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md. Specific details on patches or mitigations are not outlined in the provided CVE information.