CVE-2023-38534

{"id": "CVE-2023-38534", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@opentext.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 3.9}]}, "published": "2024-03-13T22:15:08.197", "references": [{"url": "https://support.opentext.com/csm?id=kb_article_view&sysparm_article=KB0796609", "source": "security@opentext.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@opentext.com", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "Improper authentication vulnerability in\u00a0OpenText\u2122\u00a0Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerability could allow disclosure of restricted information in unauthenticated RPC.\u00a0"}, {"lang": "es", "value": "Vulnerabilidad de autenticaci\u00f3n incorrecta en OpenText\u2122 Exceed Turbo X que afecta a las versiones 12.5.0 y 12.5.1. La vulnerabilidad podr\u00eda permitir la divulgaci\u00f3n de informaci\u00f3n restringida en RPC no autenticado."}], "lastModified": "2024-03-14T12:52:16.723", "sourceIdentifier": "security@opentext.com"}