Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN19661362/ | Third Party Advisory |
| https://www.proself.jp/information/149/ | Vendor Advisory |
| https://www.proself.jp/information/150/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Aug 2023, 16:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://jvn.jp/en/jp/JVN19661362/ - Third Party Advisory | |
| References | (MISC) https://www.proself.jp/information/150/ - Vendor Advisory | |
| References | (MISC) https://www.proself.jp/information/149/ - Vendor Advisory | |
| CWE | CWE-287 | |
| CPE | cpe:2.3:a:northgrid:proself:*:*:*:*:gateway:*:*:* cpe:2.3:a:northgrid:proself:*:*:*:*:enterprise:*:*:* cpe:2.3:a:northgrid:proself:*:*:*:*:mail_sanitize:*:*:* cpe:2.3:a:northgrid:proself:*:*:*:*:standard:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Northgrid
Northgrid proself |
18 Aug 2023, 12:43
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-18 10:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-39415
Mitre link : CVE-2023-39415
CVE.ORG link : CVE-2023-39415
JSON object : View
Products Affected
northgrid
- proself
CWE
CWE-287
Improper Authentication