CVE-2023-4392: Control iD Gerencia Web Cookie cleartext storage
A vulnerability was found in Control iD Gerencia Web 1.30 and classified as problematic. Affected by this issue is some unknown functionality of the component Cookie Handler. The manipulation leads to cleartext storage of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237380. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4392?
The severity of CVE-2023-4392 is medium with a CVSS score of 5.3.
How does CVE-2023-4392 affect Control iD Gerencia Web 1.30?
CVE-2023-4392 affects Control iD Gerencia Web 1.30 by allowing cleartext storage of sensitive information, which can be remotely exploited.
What is the impact of CVE-2023-4392?
The impact of CVE-2023-4392 is the potential cleartext storage of sensitive information, posing a risk to the confidentiality of the affected system.
Is there a fix available for CVE-2023-4392?
At the moment, there is no information available regarding a fix for CVE-2023-4392. It is recommended to follow the vendor's advisory for any updates or patches.
Where can I find more information about CVE-2023-4392?
You can find more information about CVE-2023-4392 at the following references: [Link 1](https://l6x.notion.site/PoC-Improper-Authentication-efe05964ff604beeac15f693c1e01dd6?pvs=4), [Link 2](https://vuldb.com/?ctiid.237380), [Link 3](https://vuldb.com/?id.237380).