PT-2023-20953 · Unknown · Opengoofy Hippo4J

Laoquanshi

·

CVE-2023-27096

·

Published

2023-03-27

·

Updated

2023-03-31

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions OpenGoofy Hippo4j version 1.4.3
Description The issue allows an attacker to obtain sensitive information via the ConfigVerifyController function of the Tenant Management module.
Recommendations For OpenGoofy Hippo4j version 1.4.3, consider restricting access to the ConfigVerifyController function until a patch is available.

Exploit

Fix

Incorrect Permission

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2023-27096
GHSA-H855-6HPH-V363

Affected Products

Opengoofy Hippo4J