Information Disclosure in Hitachi Energy's Web Applications
CVE-2023-5515

5.3MEDIUM

Key Information:

Vendor
Hitachi
Status
Vendor
CVE Published:
1 November 2023

Summary

An information disclosure vulnerability in Hitachi Energy's web applications allows attackers to gain insights into the internal resource paths. By exploiting this weakness, an attacker can gather sensitive details about the application’s architecture, potentially enabling further attacks against the web server and its applications. Secure coding practices and regular security assessments are recommended to mitigate this risk.

Affected Version(s)

eSOMS 6.0 <= 6.3.13

References

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.