CVE-2023-46237

2023-10-3115:15:09

Google

osv.dev

fog

open-source

cloning

imaging

security

vulnerability

endpoint

enumeration

authentication

apache

patch

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

18.7%

JSON

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10, an endpoint intended to offer limited enumeration abilities to authenticated users was accessible to unauthenticated users. This enabled unauthenticated users to discover files and their respective paths that were visible to the Apache user group. Version 1.5.10 contains a patch for this issue.

CPENameOperatorVersion
fogprojecteq1.4.4
fogprojecteq1.5.1
fogprojecteq1.3.5
fogprojecteq1.4.0
fogprojecteq1.5.7
fogprojecteq1.5.9
fogprojecteq1.5.3
fogprojecteq1.3.0
fogprojecteq1.5.2
fogprojecteq1.5.5

Name	Operator	Version
fogproject	eq	1.4.4
fogproject	eq	1.5.1
fogproject	eq	1.3.5
fogproject	eq	1.4.0
fogproject	eq	1.5.7
fogproject	eq	1.5.9
fogproject	eq	1.5.3
fogproject	eq	1.3.0
fogproject	eq	1.5.2
fogproject	eq	1.5.5