Access Control Vulnerability in PowerJob Affects Remote Information Security
CVE-2023-36106

7.5HIGH

Key Information:

Vendor

Powerjob

Status
Powerjob
Vendor
CVE Published:
17 August 2023

What is CVE-2023-36106?

An access control issue in PowerJob versions 4.3.2 and earlier enables remote attackers to exploit the appId parameter in the /container/list interface. This flaw can lead to the unauthorized disclosure of sensitive information, posing a significant risk to overall data privacy and security.

References

https://gitee.com/KFCFans/PowerJob
https://gist.github.com/tztdsb/a653b6db328199ec0f55e54b4e...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.