Lucene search

MitreCVE-2023-31445

HistoryMay 11, 2023 - 12:15 p.m.

CVE-2023-31445

2023-05-1112:15:09

CWE-732

mitre

web.nvd.nist.gov

cassia

access controller

cve-2023-31445

information disclosure

vulnerability

nvd

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

32.7%

JSON

Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have the ability to enumerate all other users and discover e-mail addresses, phone numbers, and privileges of all other users.

Affected configurations

Nvd

Node

cassianetworksaccess_controllerRange<2.1.1.2203171453

VendorProductVersionCPE
cassianetworksaccess_controller*cpe:2.3:a:cassianetworks:access_controller:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cassianetworks	access_controller	*	cpe:2.3:a:cassianetworks:access_controller::::::::

References

blog.kscsc.online/cves/202331445/md.html

github.com/Dodge-MPTC/CVE-2023-31445-Unprivileged-Information-Disclosure

www.cassianetworks.com

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

32.7%

JSON

Related for CVE-2023-31445