Read the docs

AlayaCare

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

AlayaCare records in CISA KEV

No AlayaCare vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Procura 1 record MEDIUM

Records

1 record

TI-2023-05919 CVE-2023-6451 · GHSA-2352-52mf-hwj3

Publicly Known Cryptographic Machine Key In Procura Portal Application

Priority MEDIUM 46

Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the application's authentication mechanisms.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0053 Published 2024-02-16 Fixed in 9.0.1.2 CWE-1394
Open these records in search →