PT-2023-17048 · Cp Plus · Cp Plus Kvms Pro

Harshit Shukla · Publicado 2023-03-28 · Atualizado 2023-04-05 · CVE-2023-1518

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CP Plus KVMS Pro versions 2.01.0.T.190521 and prior

Description The issue concerns the leakage of sensitive credentials due to insufficient protection.

Recommendations For CP Plus KVMS Pro versions 2.01.0.T.190521 and prior, update to a version later than 2.01.0.T.190521 to resolve the issue.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2023-1518

Produtos afetados

Cp Plus Kvms Pro

Referências · 4

• https://t.me/cvenotify/47549 · Publicação no Telegram
• https://cisa.gov/news-events/ics-advisories/icsa-23-082-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-1518 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1518 · Aviso do Fabricante