CVE-2023-39415

Опубликовано: 18 авг. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation.

Ссылки

https://jvn.jp/en/jp/JVN19661362/
Third Party Advisory
https://www.proself.jp/information/149/
Vendor Advisory
https://www.proself.jp/information/150/
Vendor Advisory
https://jvn.jp/en/jp/JVN19661362/
Third Party Advisory
https://www.proself.jp/information/149/
Vendor Advisory
https://www.proself.jp/information/150/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:northgrid:proself:*:*:*:*:mail_sanitize:*:*:*

Версия до 1.07 (включая)

cpe:2.3:a:northgrid:proself:*:*:*:*:gateway:*:*:*

Версия до 1.62 (включая)

cpe:2.3:a:northgrid:proself:*:*:*:*:enterprise:*:*:*

Версия до 5.61 (включая)

cpe:2.3:a:northgrid:proself:*:*:*:*:standard:*:*:*

Версия до 5.61 (включая)

EPSS

Процентиль: 56%

0.00338

Низкий

7.5 High

CVSS3

Дефекты

CWE-287

Связанные уязвимости

GHSA-4g7j-qx49-cxcp