Lucene search

MitreCVE-2023-37599

HistoryJul 13, 2023 - 10:15 p.m.

CVE-2023-37599

2023-07-1322:15:09

CWE-668

mitre

web.nvd.nist.gov

issabel-pbx

cve-2023-37599

security vulnerability

remote attack

sensitive information

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

58.2%

JSON

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory

Affected configurations

Nvd

Node

issabelpbxMatch4.0.0-6

VendorProductVersionCPE
issabelpbx4.0.0-6cpe:2.3:a:issabel:pbx:4.0.0-6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
issabel	pbx	4.0.0-6	cpe:2.3:a:issabel:pbx:4.0.0-6:::::::*

References

github.com/sahiloj/CVE-2023-37599

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

58.2%

JSON

Related for CVE-2023-37599