Information Disclosure in Hitachi Energy's Web Applications
CVE-2023-5515
5.3MEDIUM
Summary
An information disclosure vulnerability in Hitachi Energy's web applications allows attackers to gain insights into the internal resource paths. By exploiting this weakness, an attacker can gather sensitive details about the application’s architecture, potentially enabling further attacks against the web server and its applications. Secure coding practices and regular security assessments are recommended to mitigate this risk.
Affected Version(s)
eSOMS 6.0 <= 6.3.13
References
CVSS V3.1
Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved