PT-2023-23124 · Cloverdx · Cloverdx

Branislav Repcek · Publicado 2023-04-24 · Atualizado 2023-04-29 · CVE-2023-31056

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CloverDX versions prior to 5.15.4 CloverDX versions prior to 5.16.2 CloverDX versions prior to 5.17.3 CloverDX versions prior to 6.0.x

Description The issue arises when CloverDX writes passwords to the audit log under certain conditions, specifically if the audit log is enabled and single sign-on is not used.

Recommendations For versions prior to 5.15.4, update to version 5.15.4 or later. For versions prior to 5.16.2, update to version 5.16.2 or later. For versions prior to 5.17.3, update to version 5.17.3 or later. For versions prior to 6.0.x, update to version 6.0.x or later.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2023-31056

Produtos afetados

Cloverdx

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-31056 · Nota de Segurança
• https://t.me/cvenotify/48910 · Publicação no Telegram
• https://support1.cloverdx.com/hc/en-us/articles/8484869595164-Security-advisory-April-2023 · Aviso do Fabricante
• https://t.me/cibsecurity/62678 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-31056 · Aviso do Fabricante
• https://t.me/cvenotify/49415 · Publicação no Telegram