PT-2023-26331 · Datalust+1 · Datalust Seq+1

·

CVE-2023-38195

·

Published

2023-07-22

·

Updated

2023-08-01

CVSS v3.1

4.9

Medium

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Datalust Seq versions prior to 2023.2.9489
Description The issue allows insertion of sensitive information into an externally accessible file or directory. This can be exploited when external metadata storage, such as SQL Server or PostgreSQL, is used. Exploitation requires a high-privileged user account.
Recommendations For versions prior to 2023.2.9489, update to version 2023.2.9489 or later to resolve the issue. As a temporary workaround, consider restricting access to external metadata storage or limiting the privileges of user accounts that can access this storage.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2023-38195

Affected Products

Datalust Seq
Sql Server