CVE-2023-38752 - Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings

Back Back to CVE browser

MEDIUM

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings

Published Aug 9, 2023

4.3

MEDIUM

CVSS 3.1

EPSS 0.45%

Description

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings.

Affected products

Vendor Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Product Special Interest Group Network for Analysis and Liaison Default
n/a
- Version
  versions 4.4.0 to 4.7.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Japan Computer Emergency Response Team Coordination Center (JPCERT/CC)

Special Interest Group Network for Analysis and Liaison

n/a

Version	Status	Constraints
versions 4.4.0 to 4.7.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42527
Advisory
https://jvn.jp/en/jp/JVN83334799/
Third Party Advisory
https://www.jpcert.or.jp/press/2023/PR20230807_notice.html
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42527		Advisory
https://jvn.jp/en/jp/JVN83334799/		Third Party Advisory
https://www.jpcert.or.jp/press/2023/PR20230807_notice.html		Third Party Advisory