Security Advisory

CVE-2023-28900

5.3
MEDIUM

Vulnerability Description

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number.
Published Date January 18, 2024
Official Source NIST NVD Advisory