Lucene search

JpcertCVE-2023-39415

HistoryAug 18, 2023 - 10:15 a.m.

CVE-2023-39415

2023-08-1810:15:11

CWE-287

jpcert

web.nvd.nist.gov

cve-2023-39415

vulnerability

improper authentication

proself enterprise

proself standard

proself gateway

proself mail sanitize

remote access

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

57.6%

JSON

Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product’s Control Panel and perform an unintended operation.

Affected configurations

Nvd

Vulners

Node

northgridproselfRange≤1.07mail_sanitize

northgridproselfRange≤1.62gateway

northgridproselfRange≤5.61enterprise

northgridproselfRange≤5.61standard

VendorProductVersionCPE
northgridproself*cpe:2.3:a:northgrid:proself:*:*:*:*:mail_sanitize:*:*:*
northgridproself*cpe:2.3:a:northgrid:proself:*:*:*:*:gateway:*:*:*
northgridproself*cpe:2.3:a:northgrid:proself:*:*:*:*:enterprise:*:*:*
northgridproself*cpe:2.3:a:northgrid:proself:*:*:*:*:standard:*:*:*

Vendor	Product	Version	CPE
northgrid	proself	*	cpe:2.3:a:northgrid:proself:::::mail_sanitize:::*
northgrid	proself	*	cpe:2.3:a:northgrid:proself:::::gateway:::*
northgrid	proself	*	cpe:2.3:a:northgrid:proself:::::enterprise:::*
northgrid	proself	*	cpe:2.3:a:northgrid:proself:::::standard:::*

CNA Affected

[
  {
    "vendor": "North Grid Corporation",
    "product": "Proself Enterprise/Standard Edition",
    "versions": [
      {
        "version": "Ver5.61 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "North Grid Corporation",
    "product": "Proself Gateway Edition",
    "versions": [
      {
        "version": "Ver1.62 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "North Grid Corporation",
    "product": "Proself Mail Sanitize Edition",
    "versions": [
      {
        "version": "Ver1.07 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN19661362/

www.proself.jp/information/149/

www.proself.jp/information/150/

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

57.6%

JSON

Related for CVE-2023-39415