PT-2023-20953 · Unknown · Opengoofy Hippo4J

Laoquanshi · Publicado 2023-03-27 · Atualizado 2023-03-31 · CVE-2023-27096

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenGoofy Hippo4j version 1.4.3

Description The issue allows an attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module.

Recommendations For OpenGoofy Hippo4j version 1.4.3, consider restricting access to the ConfigVerifyController function until a patch is available.

Exploit

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2023-27096

GHSA-H855-6HPH-V363

Produtos afetados

Opengoofy Hippo4J

Referências · 6

• 🔥 https://github.com/opengoofy/hippo4j/issues/1060 · Exploit
• https://github.com/opengoofy/hippo4j · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-27096 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-h855-6hph-v363 · Aviso do Fabricante
• https://t.me/cibsecurity/60782 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-27096 · Aviso do Fabricante