CVE-2023-33283

CVE-2023-33283 affects Marval MSM up to version 14.19.0.12476, where a static encryption key is used to protect secrets. The underlying issue is the use of a hard-coded/static key for encryption-at-rest, enabling an attacker who gains access to encrypted secrets to decrypt them. The available sou...

CVE-2023-33282

CVE-2023-33282 affects Marval MSM up to 14.19.0.12476 and version 15.0, where a System account uses default credentials. This enables a remote attacker to log in and create a valid session, allowing backend calls to application endpoints. Remediation guidance from PT-Security recommends changing ...

CVE-2023-33284

Marval MSM (versions 14.19.0.12476 and earlier, and 15.0) contains a Remote Code Execution vulnerability. An attacker authenticated as any user can run code in the web server context. The issue is confirmed across multiple sources; affected products and versions are stated. Remediation provided: ...