PT-2023-26761 · Hattoriya · Hattoriya

Published 2023-11-02 · Updated 2024-09-05 · CVE-2023-39053

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hattoriya version 13.6.1

Description An information leak in Hattoriya allows attackers to obtain the channel access token and send crafted messages.

Recommendations For Hattoriya version 13.6.1, consider restricting access to the channel access token to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2023-39053

Affected Products

Hattoriya

References · 8

• 🔥 https://github.com/syz913/CVE-reports/blob/main/CVE-2023-39053.md · Exploit
• https://osv.dev/vulnerability/CVE-2023-39053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-39053 · Security Note
• https://twitter.com/CVEnew/status/1720197184589627482 · Twitter Post
• https://t.me/cvenotify/93400 · Telegram Post
• https://liff.line.me/1657507029-eDjDJQ68 · Note
• https://t.me/cvenotify/60435 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1720242285953114149 · Twitter Post