CVE-2023-4553

2024-01-2921:15:09

CWE-20

[email protected]

web.nvd.nist.gov

improper input validation

opentext appbuilder

unauthenticated access

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.001

Percentile

20.5%

JSON

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

AppBuilder configuration files are viewable by unauthenticated users.

This issue affects AppBuilder: from 21.2 before 23.2.

Affected configurations

Nvd

Node

opentextappbuilderRange21.2–23.2

AND

linuxlinux_kernelMatch-

microsoftwindowsMatch-

VendorProductVersionCPE
opentextappbuilder*cpe:2.3:a:opentext:appbuilder:*:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opentext	appbuilder	*	cpe:2.3:a:opentext:appbuilder::::::::
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*