PT-2023-29985 · Unknown · Zentao Biz

Published 2023-10-27 · Updated 2023-11-03 · CVE-2023-46376

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zentao Biz versions 8.7 and earlier

Description The issue concerns an Information Disclosure problem.

Recommendations For Zentao Biz versions 8.7 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2023-46376

Affected Products

Zentao Biz

References · 3

• 🔥 https://narrow-payment-2cd.notion.site/zentao-8-7-has-information-disclosure-vulnerability-CVE-2023-46376-537fae3936b84af583b51b74e6010dd7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-46376 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46376 · Vendor Advisory