PT-2023-28283 · Unknown · Cloudexplorer Lite

Published 2023-09-20 · Updated 2023-09-22 · CVE-2023-42147

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CloudExplorer Lite version 1.3.1

Description An issue in CloudExplorer Lite allows an attacker to obtain sensitive information via the login key component.

Recommendations For CloudExplorer Lite version 1.3.1, consider disabling the login key component until a patch is available.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2023-42147

Affected Products

Cloudexplorer Lite

References · 7

• 🔥 https://cnblogs.com/xyhz/p/17667095.html · Exploit
• https://osv.dev/vulnerability/CVE-2023-42147 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-42147 · Security Note
• https://t.me/cvenotify/58363 · Telegram Post
• https://twitter.com/CVEnew/status/1704580691650850820 · Twitter Post
• https://t.me/cibsecurity/70845 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1704629155076387272 · Twitter Post