PT-2023-27699 · Unknown · Arconte Áurea

Jorge Alberto Palma Reyes + 1 · Published 2023-09-19 · Updated 2023-09-21 · CVE-2023-4092

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arconte Áurea version 1.5.0.0

Description The issue allows an attacker to read sensitive data from the database, modify data (insert/update/delete), perform database administration operations and, in some cases, execute commands on the operating system.

Recommendations For version 1.5.0.0, consider applying security patches or updates to fix the SQL injection vulnerability, as this would prevent an attacker from exploiting the issue to access or modify sensitive data. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-4092

Affected Products

Arconte Áurea

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-4092 · Security Note
• https://osv.dev/vulnerability/CVE-2023-4092 · Vendor Advisory
• https://twitter.com/CVEnew/status/1704122938545299895 · Twitter Post
• https://t.me/cvenotify/58281 · Telegram Post
• https://t.me/cibsecurity/70715 · Telegram Post
• https://twitter.com/cracbot/status/1704374887195013379 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fujitsu-arconte-aurea · Note