Medium severity5.3NVD Advisory· Published Jul 20, 2023· Updated Jun 17, 2026
CVE-2023-38335
CVE-2023-38335
Description
Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always private" Omnis libraries can be opened by the Omnis Studio browser by bypassing specific checks. This violates the expected behavior of an "irreversible operation".
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Omnis Studio/Omnis Studiodescription
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/173695/Omnis-Studio-10.22.00-Library-Setting-Bypass.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2023/Jul/41nvdExploitMailing ListThird Party Advisory
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2023-005.txtnvdThird Party Advisory
- seclists.org/fulldisclosure/2023/Jul/43nvdNot Applicable
News mentions
0No linked articles in our index yet.