Lucene search
HistoryNov 07, 2023 - 6:15 a.m.
CVE-2023-47102
urbackup server
brute-force enumeration
user accounts
failure message
username
invalid valid.
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.0005 Low
EPSS
Percentile
17.1%
UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.
Affected configurations
Node
urbackupurbackup_serverMatch2.5.31
References
Related
cvelist
cvelist
CVE-2023-47102
2023-11-07 00:00:00
prion
prion
Code injection
2023-11-07 06:15:00
cve
cve
CVE-2023-47102
2023-11-07 06:15:12
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.0005 Low
EPSS
Percentile
17.1%
Related for NVD:CVE-2023-47102