Логотип exploitDog
bind:CVE-2023-22897
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-22897

Количество 2

Количество 2

nvd логотип

CVE-2023-22897

почти 3 года назад

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used.

CVSS3: 6.5
EPSS: Высокий
github логотип

GHSA-6pw8-5p8j-m67x

почти 3 года назад

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used.

CVSS3: 6.5
EPSS: Высокий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-22897

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used.

CVSS3: 6.5
89%
Высокий
почти 3 года назад
github логотип
GHSA-6pw8-5p8j-m67x

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used.

CVSS3: 6.5
89%
Высокий
почти 3 года назад

Уязвимостей на страницу