CVE-2023-50872

CVSS 7.5 HIGHEPSS 0.4%CWE-200

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 abr 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information about certificates and their respective holder. NOTE: the excellium-services.com web page about this issue mentions "Vendor says that it's not a security issue."

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

n/a · n/a

Referências

https://cds.thalesgroup.com/en/tcs-cert/CVE-2023-50872 https://excellium-services.com/cert-xlm-advisory/CVE-2023-50872 https://help.accredible.com/accredible-product-release-notes