PT-2023-18756 · Smartbear · Zephyr Enterprise

Publicado 2023-03-08 · Atualizado 2025-03-04 · CVE-2023-22892

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SmartBear Zephyr Enterprise versions through 7.15.0

Description The issue allows unauthenticated users to read arbitrary files from Zephyr instances. This is due to an information disclosure vulnerability.

Recommendations For versions through 7.15.0, update to a version later than 7.15.0 to resolve the issue.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2023-22892

Produtos afetados

Zephyr Enterprise

Referências · 7

• https://t.me/cvenotify/45826 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-22892 · Nota de Segurança
• https://t.me/cvenotify/46157 · Publicação no Telegram
• https://t.me/cibsecurity/59706 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-22892 · Aviso do Fabricante
• https://t.me/cvenotify/113446 · Publicação no Telegram
• https://smartbear.com/security/cve · Aviso do Fabricante