CVE-2023-38751

Published: Aug 9, 2023Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the organization information of the information receiver that is set as "non-disclosure" in the information provision operation.

Affected (1)

Products: Jpcert: Special Interest Group Network For Analysis And Liaison

1 product

Special Interest Group Network For Analysis And Liaison

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jpcert Special Interest Group Network For Analysis And Liaison	From 4.4.0 to 4.7.7

References (4)

https://jvn.jp/en/jp/JVN83334799/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.jpcert.or.jp/press/2023/PR20230807_notice.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://jvn.jp/en/jp/JVN83334799/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.jpcert.or.jp/press/2023/PR20230807_notice.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.