Lucene search

K
nvd[email protected]NVD:CVE-2023-4095
HistorySep 19, 2023 - 2:15 p.m.

CVE-2023-4095

2023-09-1914:15:24
CWE-204
CWE-203
web.nvd.nist.gov
3
cve-2023-4095
arconte áurea
user enumeration
vulnerability
registered users
application
complex attacks

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5

Confidence

High

EPSS

0.001

Percentile

28.0%

User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to obtain a list of registered users in the application, obtaining the necessary information to perform more complex attacks on the platform.

Affected configurations

Nvd
Node
fujitsuarconte_aureaMatch1.5.0.0
VendorProductVersionCPE
fujitsuarconte_aurea1.5.0.0cpe:2.3:a:fujitsu:arconte_aurea:1.5.0.0:*:*:*:*:*:*:*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5

Confidence

High

EPSS

0.001

Percentile

28.0%

Related for NVD:CVE-2023-4095