PT-2023-24765 · Unknown · Cloudexplorer Lite

Baixin513 · Publicado 2023-06-27 · Atualizado 2023-07-06 · CVE-2023-34240

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions cloudexplorer-lite versions prior to 1.2.0

Description The issue is related to weak passwords that can be easily guessed, making them an easy target for brute force attacks. This can lead to an authentication system failure and compromise system security.

Recommendations For versions prior to 1.2.0, upgrade to version 1.2.0 to fix the issue. At the moment, there are no known workarounds for this vulnerability.

Exploit

Correção

Enumeração de Fraquezas

CWE-521

Identificadores relacionados

CVE-2023-34240

GHSA-PX4M-5J22-5MW4

Produtos afetados

Cloudexplorer Lite

Referências · 4

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34240.json · Exploit
• https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-px4m-5j22-5mw4 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-34240 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-34240 · Nota de Segurança