CVE-2023-6517: Seeing the SMS Verification Code in Mia Technology's Mia-Med
First published: Thu Feb 08 2024(Updated: )
Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. M?A-MED allows Collect Data as Provided by Users.This issue affects M?A-MED: before 1.0.7.
Credit: iletisim@usom.gov.tr
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Miateknoloji Mia-med | <1.0.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-6517?
The severity of CVE-2023-6517 has not been publicly assigned a CVSS score, but it involves exposure of sensitive information.
How do I fix CVE-2023-6517?
To fix CVE-2023-6517, upgrade M?A-MED to version 1.0.7 or later.
What type of information is exposed in CVE-2023-6517?
CVE-2023-6517 exposes sensitive information due to incompatible policies related to user-provided data.
Which versions of M?A-MED are affected by CVE-2023-6517?
CVE-2023-6517 affects versions of M?A-MED before 1.0.7.
Who is impacted by CVE-2023-6517?
Users of M?A-MED prior to version 1.0.7 are at risk due to the exposure of their sensitive information.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/severity
- agent/author
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/event
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/miateknoloji
- canonical/miateknoloji mia-med