PT-2023-8824 · Unem+1 · Unem+1
CVE-2023-1711
·
Publicado
2023-05-30
·
Atualizado
2024-07-25
CVSS v3.1
4.4
Média
| Vetor | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
FOXMAN-UN versions R9C through R16A
UNEM versions R9C through R16A
Description
A vulnerability exists in the FOXMAN-UN and UNEM logging component, affecting systems that use remote authentication to the network elements. If exploited, an attacker could obtain confidential information. The issue is related to a lack of proper encoding or escaping of output data, allowing a remote attacker to access confidential data.
Recommendations
For FOXMAN-UN versions R9C through R16A, consider disabling the logging component until a patch is available.
For UNEM versions R9C through R16A, restrict access to the logging component to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Encoding or Escaping of Output
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Foxmann-Un
Unem