Lucene search

OpenTextVULNRICHMENT:CVE-2023-4553

HistoryJan 29, 2024 - 8:56 p.m.

CVE-2023-4553 Unauthenticated Access to AppBuilder Configuration Files

2024-01-2920:56:45

CWE-20

OpenText

github.com

cve-2023-4553

unauthenticated access

appbuilder configuration files

improper input validation

opentext appbuilder

windows

linux

probe system files

vulnerability

improper input validation vulnerability

system files.

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

AppBuilder configuration files are viewable by unauthenticated users.

This issue affects AppBuilder: from 21.2 before 23.2.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:opentext:appbuilder:*:*:*:*:*:*:*:*"
    ],
    "vendor": "opentext",
    "product": "appbuilder",
    "versions": [
      {
        "status": "affected",
        "version": "21.2",
        "lessThan": "23.2",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "23.2"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2023-4553