CVE-2023-42954

2024-03-2122:24:36

apple

www.cve.org

filemaker server

privilege escalation

20.3.1

sensitive information

admin console

AI Score

6.7

Confidence

Low

EPSS

Percentile

9.0%

JSON

A privilege escalation issue existed in FileMaker Server, potentially exposing sensitive information to front-end websites when signed in to the Admin Console with an administrator role. This issue has been fixed in FileMaker Server 20.3.1 by reducing the information sent in requests.

CNA Affected

[
  {
    "vendor": "Claris",
    "product": "FileMaker Server",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "20.3.1",
        "versionType": "custom"
      }
    ]
  }
]

References

support.claris.com/s/answerview?anum=000041424&language=en_US