PT-2023-8824 · Unem+1 · Unem+1

CVE-2023-1711

·

Publicado

2023-05-30

·

Atualizado

2024-07-25

CVSS v3.1

4.4

Média

VetorAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions FOXMAN-UN versions R9C through R16A UNEM versions R9C through R16A
Description A vulnerability exists in the FOXMAN-UN and UNEM logging component, affecting systems that use remote authentication to the network elements. If exploited, an attacker could obtain confidential information. The issue is related to a lack of proper encoding or escaping of output data, allowing a remote attacker to access confidential data.
Recommendations For FOXMAN-UN versions R9C through R16A, consider disabling the logging component until a patch is available. For UNEM versions R9C through R16A, restrict access to the logging component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Encoding or Escaping of Output

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-02092
CVE-2023-1711

Produtos afetados

Foxmann-Un
Unem