PT-2023-5124 · Dover Fueling Solutions · Maglink Lx Web Console Configuration

CVE-2023-38256

·

Publicado

2023-09-07

·

Atualizado

2023-09-15

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1 through 3.3
Description The issue is related to incorrect restriction of directory path names with limited access. This could allow a remote attacker to access files stored on the system through a path traversal attack.
Recommendations For versions 2.5.1 through 3.3, as a temporary workaround, consider restricting access to sensitive files and directories until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-05715
CVE-2023-38256

Produtos afetados

Maglink Lx Web Console Configuration