Read the docs

Synopsys

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Synopsys records in CISA KEV

No Synopsys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coverity 2 records MEDIUM Black Duck Hub 1 record LOW Code Dx 1 record MEDIUM Hub-rest-api-python 1 record LOW Seeker 1 record LOW Seeker Iast Service Broker 1 record LOW

Records

1 record in Code Dx · all components

TI-2023-02026 CVE-2023-2158 · GHSA-7w8f-q3m3-pfj7

Impersonation through User-Controlled Token

Priority MEDIUM 50

Code Dx versions prior to 2023.4.2 are vulnerable to user impersonation attack where a malicious actor is able to gain access to another user's account by crafting a custom "Remember Me" token.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2023-04-27 No fix listed CWE-321
Open these records in search →