PT-2023-24316 · Control Id · Idsecure

CVE-2023-33368 · Publicado 2023-08-03 · Atualizado 2023-08-04

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Control ID IDSecure versions 4.7.26.0 and prior

Description The issue allows some API routes to exfiltrate sensitive information and passwords to users accessing these routes.

Recommendations For Control ID IDSecure versions 4.7.26.0 and prior, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

CVE-2023-33368

Produtos afetados

Idsecure

Referências · 5

• https://osv.dev/vulnerability/CVE-2023-33368 · Aviso do Fabricante
• https://claroty.com/team82/disclosure-dashboard/cve-2023-33368 · Nota
• https://controlid.com.br/en/access-control/idsecure · Aviso do Fabricante
• https://t.me/cvenotify/55664 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-33368 · Nota de Segurança