CVE-2023-4553: Unauthenticated Access to AppBuilder Configuration Files
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
AppBuilder configuration files are viewable by unauthenticated users.
This issue affects AppBuilder: from 21.2 before 23.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4553?
CVE-2023-4553 is considered a medium severity vulnerability due to improper input validation that allows unauthenticated users to view sensitive configuration files.
How do I fix CVE-2023-4553?
To fix CVE-2023-4553, ensure that you upgrade OpenText AppBuilder to version 23.2 or later.
Who is affected by CVE-2023-4553?
CVE-2023-4553 affects all installations of OpenText AppBuilder from version 21.2 up to, but not including, 23.2.
What type of vulnerability is CVE-2023-4553?
CVE-2023-4553 is classified as an improper input validation vulnerability.
Can unauthenticated users exploit CVE-2023-4553?
Yes, CVE-2023-4553 allows unauthenticated users to view AppBuilder configuration files, posing a security risk.