First published: Fri Dec 22 2023(Updated: )
Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For Transportation before 23.00.01.25.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Bentley Assetwise Alim For Transportation | <23.00.01.25 | |
Bentley eB System Management Console | <23.00.02.03 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-51708 is classified as a medium severity vulnerability due to the potential for information disclosure.
To fix CVE-2023-51708, update to Bentley eB System Management Console version 23.00.02.03 or later and Assetwise Alim For Transportation version 23.00.01.25 or later.
CVE-2023-51708 is an information disclosure vulnerability that allows unauthenticated users to view configuration options.
The affected software versions for CVE-2023-51708 include Bentley eB System Management Console before version 23.00.02.03 and Bentley Assetwise Alim For Transportation before version 23.00.01.25.
Organizations using the specified versions of Bentley eB System Management Console and Assetwise Alim For Transportation are at risk due to CVE-2023-51708.