Lucene search

K
nvd[email protected]NVD:CVE-2023-37224
HistoryJul 14, 2023 - 6:15 p.m.

CVE-2023-37224

2023-07-1418:15:10
CWE-532
web.nvd.nist.gov
3
archer platform
sensitive information
log files
authenticated attacker

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.0%

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the log files.

Affected configurations

Nvd
Node
archerirmarcherRange<6.13.0.1
VendorProductVersionCPE
archerirmarcher*cpe:2.3:a:archerirm:archer:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-37224