exploitDog

CVE-2023-33368

Опубликовано: 03 авг. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these API routes.

Ссылки

https://claroty.com/team82/disclosure-dashboard/cve-2023-33368
Third Party Advisory
https://www.controlid.com.br/en/access-control/idsecure/
Vendor Advisory
https://claroty.com/team82/disclosure-dashboard/cve-2023-33368
Third Party Advisory
https://www.controlid.com.br/en/access-control/idsecure/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:assaabloy:control_id_idsecure:*:*:*:*:*:*:*:*

Версия до 4.7.26.0 (включая)

EPSS

Процентиль: 37%

0.00158

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-668

Связанные уязвимости

GHSA-x66f-cjpx-7pq8

CVSS3: 6.5

github

больше 2 лет назад

Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these API routes.

EPSS

Процентиль: 37%

0.00158

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-668