CVE-2023-1014 - OpenCVE

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting.This issue affects Vira-Investing: before 1.0.84.86.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Dizayn	Vira-investing

Configuration 1 [-]

cpe:2.3:a:dizayn:vira-investing:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.usom.gov.tr/bildirim/tr-23-0183

History

No history.

MITRE

Status: PUBLISHED

Assigner: TR-CERT

Published: 2023-03-30T08:17:03.971Z

Updated: 2024-08-02T05:32:46.255Z

Reserved: 2023-02-24T14:12:38.300Z

Link: CVE-2023-1014

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-03-30T09:15:10.440

Modified: 2023-11-07T04:02:13.327

Link: CVE-2023-1014

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-1014", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2023-02-24T14:12:38.300Z", "datePublished": "2023-03-30T08:17:03.971Z", "dateUpdated": "2024-08-02T05:32:46.255Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Vira-Investing", "vendor": "Virames", "versions": [{"lessThan": "1.0.84.86", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Furkan KUTLUCA"}], "datePublic": "2023-03-30T08:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting.<p>This issue affects Vira-Investing: before 1.0.84.86.</p>"}], "value": "Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting.This issue affects Vira-Investing: before 1.0.84.86.\n\n"}], "impacts": [{"capecId": "CAPEC-575", "descriptions": [{"lang": "en", "value": "CAPEC-575 Account Footprinting"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1320", "description": "CWE-1320 Improper Protection for Outbound Error Messages and Alert Signals", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2023-04-06T05:43:36.670Z"}, "references": [{"tags": ["government-resource"], "url": "https://www.usom.gov.tr/bildirim/tr-23-0183"}], "source": {"advisory": "TR-23-0183", "defect": ["TR-23-0183"], "discovery": "UNKNOWN"}, "title": "Information disclosure in Vira-Investing", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:32:46.255Z"}, "title": "CVE Program Container", "references": [{"tags": ["government-resource", "x_transferred"], "url": "https://www.usom.gov.tr/bildirim/tr-23-0183"}]}]}}