CVE-2023-47298

Published: Jun 23, 2025Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.

Affected (1)

Products: Ncr: Terminal Handler

1 product

Terminal Handler

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ncr Terminal Handler	Version 1.5.1

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://drive.google.com/file/d/1-BDd0ycuYhuxo-lg4th-Cswimoqqzkot/view?usp=sharing

Source: cve@mitre.org

Permissions Required

https://github.com/pwahba/cve-research/blob/main/CVE-2023-47298/CVE-2023-47298.md

Source: cve@mitre.org

Third Party Advisory

Timeline

No history available yet.