CVE-2023-47294 Information

Jun 26, 2025 cve

Description

An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate lock and delete user accounts via a crafted session cookie.

Reference

https://drive.google.com/file/d/1owG3_2oVpoCb34Mb7nCYZNrjW8cFxpzN/view?usp=sharing https://github.com/pwahba/cve-research/blob/main/CVE-2023-47294/CVE-2023-47294.md

CNNVD-202506-2964 (Published: 2025-06-23)

Share on: