CVE-2023-4392

MEDIUM Year: 2023
CVSS v3 Score
5.3
Medium
CVSS v2 Score
2.6
Low
Weakness Type
CWE-312
View all →

Vulnerability Description

A vulnerability was found in Control iD Gerencia Web 1.30 and classified as problematic. Affected by this issue is some unknown functionality of the component Cookie Handler. The manipulation leads to cleartext storage of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237380. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Related Vulnerabilities

CVE-2019-8118

MEDIUM
CVSS:5.3(Medium)

Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attempts for customer accounts.

CWE-3122019

CVE-2020-12859

MEDIUM
CVSS:5.3(Medium)

Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify a device model by observing cleartext payload data. This allows re-identificatio...

CWE-3122020

CVE-2020-15325

MEDIUM
CVSS:5.3(Medium)

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded Erlang cookie for ejabberd replication.

CWE-3122020

CVE-2020-15384

MEDIUM
CVSS:5.3(Medium)

Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of internal server information in the initial login response header.

CWE-3122020

CVE-2020-15784

MEDIUM
CVSS:5.3(Medium)

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). Insecure storage of sensitive information in the configuration files could allow the retrieval of user names.

CWE-3122020

CVE-2020-35658

MEDIUM
CVSS:5.3(Medium)

SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted.

CWE-3122020