User enumeration vulnerability in Fujitsu Arconte Áurea
CVE-2023-4095

5.3MEDIUM

Key Information:

Vendor

Fujitsu

Status
Arconte Áurea
Vendor
CVE Published:
19 September 2023

What is CVE-2023-4095?

User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to obtain a list of registered users in the application, obtaining the necessary information to perform more complex attacks on the platform.

Affected Version(s)

Arconte Áurea 0 < 1.5.0.0

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multip...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pablo Arias Rodriguez and Jorge Alberto Palma Reyes, members of CSIRT-CV
JSON
.
CVE-2023-4095 : User enumeration vulnerability in Fujitsu Arconte Áurea