Lucene search
NCSC.chVULNRICHMENT:CVE-2023-37879HistorySep 12, 2023 - 8:15 a.m.
CVE-2023-37879 Exposed Session Variable in Wing FTP Server <= 7.2.0
2023-09-1208:15:31
CWE-922
NCSC.ch
github.com
cve-2023-37879
exposed session variable
insecure storage
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
6.6
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Insecure storage of sensitive information in Wing FTP Server (User Web Client) allows information elicitation.This issue affects Wing FTP Server: <= 7.2.0.
References
Related
cvelist
cvelist
CVE-2023-37879 Exposed Session Variable in Wing FTP Server <= 7.2.0
2023-09-12 08:15:31
nvd
nvd
CVE-2023-37879
2023-09-12 09:15:08
cve
cve
CVE-2023-37879
2023-09-12 09:15:08
prion
prion
Information disclosure
2023-09-12 09:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
6.6
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2023-37879