CVE-2023-38752

Published: Aug 9, 2023Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings.

Affected (1)

Products: Jpcert: Special Interest Group Network For Analysis And Liaison

1 product

Special Interest Group Network For Analysis And Liaison

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jpcert Special Interest Group Network For Analysis And Liaison	From 4.4.0 to 4.7.7

References (4)

https://jvn.jp/en/jp/JVN83334799/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://www.jpcert.or.jp/press/2023/PR20230807_notice.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://jvn.jp/en/jp/JVN83334799/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.jpcert.or.jp/press/2023/PR20230807_notice.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.