PT-2023-21861 · Unknown · Sqlite Database+1

Gab3 + 1 · Published 2023-05-24 · Updated 2024-05-17 · CVE-2023-2863

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple Design Daily Journal version 1.012.GP.B

Description A vulnerability has been found in the SQLite Database component, leading to cleartext storage in a file or on disk. The manipulation can be launched on the local host. The exploit has been disclosed to the public and may be used.

Recommendations For version 1.012.GP.B, consider restricting access to the SQLite Database component to minimize the risk of exploitation. As a temporary workaround, avoid using the SQLite Database functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

CWE-313

Related Identifiers

CVE-2023-2863

Affected Products

Sqlite Database

Simple Design Daily Journal

References · 7

• 🔥 https://youtube.com/watch?v=V0u9C5RVSic · Exploit
• https://osv.dev/vulnerability/CVE-2023-2863 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2863 · Security Note
• https://t.me/cvenotify/51036 · Telegram Post
• https://t.me/cvenotify/51032 · Telegram Post
• https://vuldb.com/?id.229819 · Note
• https://vuldb.com/?ctiid.229819 · Note