Claris International Fixes Issue with Password Exposure in Admin Console

CVE-2023-42955

What is CVE-2023-42955?

A vulnerability exists in Claris FileMaker Server, where passwords associated with the Administrator role may be unintentionally exposed to front-end websites during active sessions in the Admin Console. This exposure happens due to the transmission of sensitive password data via Node.js sockets. To address the issue, Claris International has released an update in FileMaker Server version 20.3.1 that effectively prevents the inadvertent sending of these passwords, thereby enhancing the security posture of the application.

References