CVE-2023-4096: Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea
First published: Tue Sep 19 2023(Updated: )
Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow an attacker to perform a brute force attack on the emailed PIN number in order to change the password of a legitimate user.
Credit: cve-coordination@incibe.es cve-coordination@incibe.es
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fujitsu Arconte Aurea | =1.5.0.0 | |
| =1.5.0.0 |
Remedy
This vulnerabilities have been fixed by Fujitsu in version 1.5.0.0, released on 4/4/2022. All new versions of the product, including the latest 1.6.2.3, also include the fixes.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this weak password recovery mechanism vulnerability?
The vulnerability ID for this weak password recovery mechanism vulnerability is CVE-2023-4096.
What is the affected software version?
The affected software version is Fujitsu Arconte Áurea version 1.5.0.0.
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is high, with a CVSS score of 8.6.
What can an attacker do if they exploit this vulnerability?
An attacker who exploits this vulnerability can perform a brute force attack on the emailed PIN number to change the password of a legitimate user.
Is there a fix or patch available for this vulnerability?
It is recommended to update to a patched version of Fujitsu Arconte Áurea to address this vulnerability.
- collector/nvd-index
- agent/author
- agent/type
- agent/severity
- agent/references
- agent/weakness
- agent/title
- agent/remedy
- agent/first-publish-date
- agent/description
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/fujitsu
- canonical/fujitsu arconte aurea
- version/fujitsu arconte aurea/1.5.0.0