Description
An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve sensitive information stored on the server such as credential files, configuration files, application files, etc., simply by appending any of the following parameters to the end of the URL: %00 %0a, %20, %2a, %a0, %aa, %c0 and %ca.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| BVRP Software | SLmail | unaffected |
|
Configuration 1 [-]
| AND |
|
No data.
No data available yet.
Remediation
Vendor Solution
There is no reported solution at the moment.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-54448 | An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve sensitive information stored on the server such as credential files, configuration files, application files, etc., simply by appending any of the following parameters to the end of the URL: %00 %0a, %20, %2a, %a0, %aa, %c0 and %ca. |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: INCIBE
Published:
Updated: 2024-08-02T07:31:06.614Z
Reserved: 2023-08-29T08:30:24.615Z
Link: CVE-2023-4595
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-11-23T13:15:12.533
Modified: 2024-11-21T08:35:30.530
Link: CVE-2023-4595
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses