CVE-2023-4095: User enumeration vulnerability in Fujitsu Arconte Áurea

Published Sep 19, 2023

Updated

User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to obtain a list of registered users in the application, obtaining the necessary information to perform more complex attacks on the platform.

Affected Software

1 affected component

Fujitsu ARCONTE Aurea=1.5.0.0

Remediation

Information

This vulnerabilities have been fixed by Fujitsu in version 1.5.0.0, released on 4/4/2022. All new versions of the product, including the latest 1.6.2.3, also include the fixes.

Event History

Sep 19, 2023

CVE Published

via MITRE·01:22 PM

Data Sourced

via MITRE·01:22 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-4095?

CVE-2023-4095 is a user enumeration vulnerability in Arconte Áurea 1.5.0.0 version of Fujitsu Arconte Aurea software.

How does CVE-2023-4095 affect the system?

CVE-2023-4095 allows an attacker to obtain a list of registered users in the application, potentially enabling more complex attacks on the platform.

What is the severity of CVE-2023-4095?

CVE-2023-4095 has a severity rating of 5.3 (medium).

Which software version is affected by CVE-2023-4095?

CVE-2023-4095 affects the 1.5.0.0 version of Arconte Áurea from Fujitsu Arconte Aurea.

Is there a fix available for CVE-2023-4095?

At the moment, there is no information available about a fix for CVE-2023-4095. It is recommended to follow the official advisories and updates provided by the software vendor.