CVE-2023-5937

MEDIUM Year: 2023
CVSS v3 Score
3.8
Low
Weakness Type
CWE-538
View all →

Vulnerability Description

On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers, via exfiltration of sensitive data from configuration files.

Related Vulnerabilities

CVE-2025-25586

MEDIUM
CVSS:4.2(Medium)

yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml.

CWE-5382025

CVE-2017-5387

LOW
CVSS:3.3(Low)

The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a "<track>" tag refers to a file that does not exist if the s...

CWE-5382017

CVE-2018-16970

MEDIUM
CVSS:4.3(Medium)

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.

CWE-5382018

CVE-2019-10320

MEDIUM
CVSS:4.3(Medium)

Jenkins Credentials Plugin 2.1.18 and earlier allowed users with permission to create or update credentials to confirm the existence of files on the Jenkins master with an attacker-specified path, and...

CWE-5382019

CVE-2019-12623

MEDIUM
CVSS:4.3(Medium)

A vulnerability in the web server functionality of Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform file enume...

CWE-5382019

CVE-2022-43933

MEDIUM
CVSS:4.4(Medium)

An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in supportsave. Supportsave file is generated by an ...

CWE-5382022