CVE-2023-44038: Medium severity veridiumid vulnerability
Published Apr 3, 2024
·Updated
In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack.
Affected Software
2 affected components
Veridium VeridiumID<3.5.0
VeridiumID VeridiumAD<3.5.0
Event History
Apr 3, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-44038?
CVE-2023-44038 has a medium severity rating due to the risk of information disclosure from an LDAP injection attack.
2
How do I fix CVE-2023-44038?
To fix CVE-2023-44038, upgrade VeridiumID to version 3.5.0 or later to patch the vulnerability.
3
What impact does CVE-2023-44038 have on user security?
CVE-2023-44038 allows unauthenticated attackers to gather information about registered users, potentially compromising their security.
4
Is CVE-2023-44038 specific to certain versions of VeridiumID?
Yes, CVE-2023-44038 specifically affects versions of VeridiumID prior to 3.5.0.
5
Can CVE-2023-44038 be exploited remotely?
Yes, CVE-2023-44038 can be exploited remotely by an unauthenticated attacker.