Podatność CVE-2023-22897

Podatność CVE-2023-22897

Publikacja: 2023-04-12 Modyfikacja: 2023-04-13

Opis:

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used.

W naszej bazie, znaleźliśmy następujące noty dla tego CVE:

	Tytuł	Autor	Data
Med.	SecurePoint UTM 12.x Memory Leak	Julien Ahrens	18.04.2023

Typ:

CWE-457

(Use of Uninitialized Variable)

Referencje:

https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2023-22897.txt

https://rcesecurity.com

Copyright 2024, cxsecurity.com