PT-2023-5878 · Dexma · Dexgate

Aarón Flecha Menéndez · Published 2023-09-28 · Updated 2023-10-25 · CVE-2023-42666

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions No specific software name and version are mentioned in the provided descriptions.

Description The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor, which may allow an attacker to create malicious requests for obtaining information about the web server used. The vulnerability is related to a lack of protection for service data, which could allow a remote attacker to disclose protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Information Disclosure

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-200

CWE-266

Related Identifiers

BDU:2023-06571

CVE-2023-42666

Affected Products

Dexgate

References · 9

• https://bdu.fstec.ru/vul/2023-06571 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-42666 · Security Note
• https://osv.dev/vulnerability/CVE-2023-42666 · Vendor Advisory
• https://vuldb.com/ru/?id.240844 · Note
• https://twitter.com/CVEnew/status/1715075165053432155 · Twitter Post
• https://cisa.gov/news-events/ics-advisories/icsa-23-271-02 · Note
• https://twitter.com/VulmonFeeds/status/1715108128688103604 · Twitter Post
• https://t.me/cibsecurity/72598 · Telegram Post
• https://itsecuritynews.info/dexma-dexgate · Note