Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an unauthenticated user to view profile information, including user login names and encrypted passwords.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03 | Third Party Advisory US Government Resource |
Configurations
History
28 Jul 2023, 15:31
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | (MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-199-03 - Third Party Advisory, US Government Resource | |
| CPE | cpe:2.3:a:iagona:scrutisweb:*:*:*:*:*:*:*:* |
18 Jul 2023, 18:24
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-18 18:15
Updated : 2024-02-05 00:01
NVD link : CVE-2023-38257
Mitre link : CVE-2023-38257
CVE.ORG link : CVE-2023-38257
JSON object : View
Products Affected
iagona
- scrutisweb
CWE
No CWE.