Lucene search

K
nvd[email protected]NVD:CVE-2023-1518
HistoryMar 28, 2023 - 9:15 p.m.

CVE-2023-1518

2023-03-2821:15:10
CWE-522
web.nvd.nist.gov
5
cve-2023-1518
cp plus
kvms pro
sensitive credentials
leakage
vulnerability
insufficiently protected

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

50.3%

CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to
sensitive credentials being leaked because they are insufficiently
protected.

Affected configurations

Nvd
Node
cpplusworldkvms_proRange2.01.0.t.190521
VendorProductVersionCPE
cpplusworldkvms_pro*cpe:2.3:a:cpplusworld:kvms_pro:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

50.3%

Related for NVD:CVE-2023-1518