CVE-2023-41263 - An issue was discovered in Plixer Scrutinizer before 19.3.1

Back Back to CVE browser

LOW

An issue was discovered in Plixer Scrutinizer before 19.3.1

Published Oct 12, 2023

3.7

LOW

CVSS 3.1

EPSS 0.41%

Description

An issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to unauthenticated users at the /debug/ URL path. With knowledge of valid IP addresses and source types, an unauthenticated attacker can download debug logs containing application-related information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-45780
Advisory
https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.md
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-45780		Advisory
https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0001.md		ExploitThird Party Advisory