PT-2023-5878 · Dexma · Dexgate

Aarón Flecha Menéndez · CVE-2023-42666 · Publicado 2023-09-28 · Atualizado 2023-10-25

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software name and version are mentioned in the provided descriptions.

Description The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor, which may allow an attacker to create malicious requests for obtaining information about the web server used. The vulnerability is related to a lack of protection for service data, which could allow a remote attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Information Disclosure

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-284

CWE-200

CWE-266

Identificadores relacionados

BDU:2023-06571

CVE-2023-42666

Produtos afetados

Dexgate

Referências · 9

• https://vuldb.com/ru/?id.240844 · Nota
• https://bdu.fstec.ru/vul/2023-06571 · Nota de Segurança
• https://twitter.com/CVEnew/status/1715075165053432155 · Publicação no Twitter
• https://cisa.gov/news-events/ics-advisories/icsa-23-271-02 · Nota
• https://twitter.com/VulmonFeeds/status/1715108128688103604 · Publicação no Twitter
• https://t.me/cibsecurity/72598 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-42666 · Nota de Segurança
• https://itsecuritynews.info/dexma-dexgate · Nota
• https://osv.dev/vulnerability/CVE-2023-42666 · Aviso do Fabricante