PT-2023-24765 · Unknown · Cloudexplorer Lite

Baixin513 · Published 2023-06-27 · Updated 2023-07-06 · CVE-2023-34240

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions cloudexplorer-lite versions prior to 1.2.0

Description The issue is related to weak passwords that can be easily guessed, making them an easy target for brute force attacks. This can lead to an authentication system failure and compromise system security.

Recommendations For versions prior to 1.2.0, upgrade to version 1.2.0 to fix the issue. At the moment, there are no known workarounds for this vulnerability.

Exploit

Fix

Weakness Enumeration

CWE-521

Related Identifiers

CVE-2023-34240

GHSA-PX4M-5J22-5MW4

Affected Products

Cloudexplorer Lite

References · 4

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34240.json · Exploit
• https://github.com/CloudExplorer-Dev/CloudExplorer-Lite/security/advisories/GHSA-px4m-5j22-5mw4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-34240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34240 · Security Note