PT-2023-17048 · Cp Plus · Cp Plus Kvms Pro

Harshit Shukla · Published 2023-03-28 · Updated 2023-04-05 · CVE-2023-1518

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CP Plus KVMS Pro versions 2.01.0.T.190521 and prior

Description The issue concerns the leakage of sensitive credentials due to insufficient protection.

Recommendations For CP Plus KVMS Pro versions 2.01.0.T.190521 and prior, update to a version later than 2.01.0.T.190521 to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2023-1518

Affected Products

Cp Plus Kvms Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-1518 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1518 · Vendor Advisory
• https://t.me/cvenotify/47549 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-082-02 · Note