Apache OFBiz Authentication Bypass (CVE-2023-51467, CVE-2023-49070)

What is the vulnerability? There is an authentication bypass vulnerability in Apache OFBiz tracked under CVE-2023-51467 and CVE-2023-49070. Successful exploitation would let an attacker circumvent authentication processes, enabling them to remotely execute arbitrary code and access sensitive information. Apache OFBiz is an open-source business application suite for Enterprise Resource Planning (ERP) which integrates and automates many of the business processes across industries.

What is the Vendor Solution?

Customers are advised to upgrade to Apache OFBiz version 18.12.11 to patch these …

access apache apache ofbiz application arbitrary code attacker authentication authentication bypass business bypass bypass vulnerability code cve cve-2023-49070 cve-2023-51467 enterprise erp exploitation information ofbiz planning processes resource sensitive sensitive information under vulnerability what is