PT-2023-31886 · Unknown · Assetwise Alim For Transportation+1

Published 2023-12-22 · Updated 2024-01-09 · CVE-2023-51708

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions eB System Management Console versions prior to 23.00.02.03 Assetwise ALIM For Transportation versions prior to 23.00.01.25

Description The issue allows an unauthenticated user to view configuration options via a crafted request, leading to information disclosure.

Recommendations For eB System Management Console versions prior to 23.00.02.03, update to version 23.00.02.03 or later. For Assetwise ALIM For Transportation versions prior to 23.00.01.25, update to version 23.00.01.25 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-51708

Affected Products

Assetwise Alim For Transportation

Eb System Management Console

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-51708 · Security Note
• https://bentley.com/advisories/be-2023-0002 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-51708 · Vendor Advisory
• https://t.me/cvenotify/64821 · Telegram Post
• https://t.me/cvenotify/66760 · Telegram Post