Lucene search
HistoryFeb 01, 2024 - 2:15 p.m.
CVE-2024-0935
cve-2024-0935
sensitive information
log file
vulnerability
delmia apriso
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.3%
Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024
Affected configurations
Node
3dsdelmia_aprisoRange2019–2024
| CPE | Name | Operator | Version |
|---|---|---|---|
| 3ds:delmia_apriso | 3ds delmia apriso | le | 2024 |
CNA Affected
[
{
"vendor": "Dassault Systèmes",
"product": "DELMIA Apriso",
"versions": [
{
"status": "affected",
"version": "Apriso 2019 Golden",
"lessThanOrEqual": "Apriso 2019 SP5",
"versionType": "custom"
},
{
"status": "affected",
"version": "Apriso 2020 Golden",
"lessThanOrEqual": "Apriso 2020 SP4",
"versionType": "custom"
},
{
"status": "affected",
"version": "Apriso 2021 Golden",
"lessThanOrEqual": "Apriso 2021 SP3",
"versionType": "custom"
},
{
"status": "affected",
"version": "Apriso 2022 Golden",
"lessThanOrEqual": "Apriso 2022 SP3",
"versionType": "custom"
},
{
"status": "affected",
"version": "Apriso 2023 Golden",
"lessThanOrEqual": "Apriso 2023 SP2",
"versionType": "custom"
},
{
"status": "affected",
"version": "Apriso 2024 Golden"
}
],
"defaultStatus": "unaffected"
}
]References
Related
prion
prion
Design/Logic Flaw
2024-02-01 14:15:00
cvelist
cvelist
nvd
nvd
CVE-2024-0935
2024-02-01 14:15:56
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.3%
Related for CVE-2024-0935