CVE-2023-4096: Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea
Published Sep 19, 2023
·Updated
Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.
Affected Software
1 affected component
Fujitsu ARCONTE Aurea=1.5.0.0
Remediation
Information
This vulnerabilities have been fixed by Fujitsu in version 1.5.0.0, released on 4/4/2022. All new versions of the product, including the latest 1.6.2.3, also include the fixes.
Event History
Sep 19, 2023
CVE Published
via MITRE·01:24 PM
Data Sourced
via MITRE·01:24 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this weak password recovery mechanism vulnerability?
The vulnerability ID for this weak password recovery mechanism vulnerability is CVE-2023-4096.
2
What is the affected software version?
The affected software version is Fujitsu Arconte Áurea version 1.5.0.0.
3
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is high, with a CVSS score of 8.6.
4
What can an attacker do if they exploit this vulnerability?
An attacker who exploits this vulnerability can perform a brute force attack on the emailed PIN number to change the password of a legitimate user.
5
Is there a fix or patch available for this vulnerability?
It is recommended to update to a patched version of Fujitsu Arconte Áurea to address this vulnerability.