PT-2023-31437

CVE-2023-49979

Published

2023-12-20

Updated

2024-08-06

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Customer Support System version v1

Description A directory listing issue allows attackers to list directories and sensitive files within the application without requiring authorization.

Recommendations For Customer Support System version v1, consider restricting access to sensitive directories and files to minimize the risk of exploitation. As a temporary workaround, review and adjust the application's authorization settings to ensure proper access controls are in place.

Exploitability

Exploit

Fix

Impacts

Researchers

Geraldo Alcântara

Geraldoalcantara

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

CWE-548: Exposure of Information Through Directory Listing