CVE-2023-6451

CVE-2023-6451 describes a critical authentication bypass vulnerability in AlayaCare's Procura Portal versions prior to 9.0.1.2, stemming from a publicly known cryptographic machine key. This flaw allows unauthenticated attackers to forge authentication cookies, gaining unauthorized access to the application. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of confidentiality. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.