PT-2023-32145 · Esoms · Esoms

Publicado 2023-10-31 · Atualizado 2023-11-08 · CVE-2023-5514

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions eSOMS (affected versions not specified)

Description The response messages received from the eSOMS report generation using certain parameter queries with full file path can be abused for enumerating the local file system structure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2023-5514

Produtos afetados

Esoms

Referências · 6

• https://publisher.hitachienergy.com/preview?DocumentId=8DBD000175&languageCode=en&Preview=true · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1719588867358011790 · Publicação no Twitter
• https://t.me/cibsecurity/73291 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-5514 · Nota de Segurança
• https://twitter.com/CVEnew/status/1719548022210847032 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-5514 · Aviso do Fabricante