CVE-2023-0317 - OpenCVE

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Secomea	Gatemanager

Configuration 1 [-]

cpe:2.3:a:secomea:gatemanager:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.secomea.com/support/cybersecurity-advisory/

History

No history.

MITRE

Status: PUBLISHED

Assigner: Secomea

Published: 2023-04-19T11:57:46.409Z

Updated: 2024-08-02T05:10:55.186Z

Reserved: 2023-01-16T09:36:00.479Z

Link: CVE-2023-0317

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-04-19T12:15:07.900

Modified: 2023-05-01T13:47:17.730

Link: CVE-2023-0317

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-0317", "assignerOrgId": "f2815942-3388-4c08-ba09-6c15850fda90", "state": "PUBLISHED", "assignerShortName": "Secomea", "dateReserved": "2023-01-16T09:36:00.479Z", "datePublished": "2023-04-19T11:57:46.409Z", "dateUpdated": "2024-08-02T05:10:55.186Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "GateManager", "vendor": "Secomea", "versions": [{"lessThan": "10.1", "status": "affected", "version": "10.0", "versionType": "custom"}]}], "datePublic": "2023-04-19T11:57:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information."}], "value": "Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information."}], "impacts": [{"capecId": "CAPEC-383", "descriptions": [{"lang": "en", "value": "CAPEC-383 Harvesting Information via API Event Monitoring"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-420", "description": "CWE-420 Unprotected Alternate Channel", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "f2815942-3388-4c08-ba09-6c15850fda90", "shortName": "Secomea", "dateUpdated": "2023-04-19T11:57:46.409Z"}, "references": [{"url": "https://www.secomea.com/support/cybersecurity-advisory/"}], "source": {"discovery": "INTERNAL"}, "title": "GateManager debug interface is included in non-debug builds", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:10:55.186Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.secomea.com/support/cybersecurity-advisory/", "tags": ["x_transferred"]}]}]}}