CVE-2023-41088

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clients have access to the DexGate server, could capture traffic. The attacker can later us the information within it to access the application.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02	Third Party Advisory US Government Resource

Configurations

Configuration 1 (hide)

cpe:2.3:a:dexma:dexgate:20130114:*:*:*:*:*:*:*

History

25 Oct 2023, 13:39

Type	Values Removed	Values Added
First Time		Dexma Dexma dexgate
CPE		cpe:2.3:a:dexma:dexgate:20130114:::::::*
CWE		CWE-319
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.5
References	~~(MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02 -~~	(MISC) https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02 - Third Party Advisory, US Government Resource

19 Oct 2023, 19:36

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-10-19 19:15

Updated : 2023-12-10 15:14

NVD link : CVE-2023-41088

Mitre link : CVE-2023-41088

CVE.ORG link : CVE-2023-41088

JSON object : View

Products Affected

dexma

dexgate

CWE

CWE-319

Cleartext Transmission of Sensitive Information

{"id": "CVE-2023-41088", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 2.1}]}, "published": "2023-10-19T19:15:15.427", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-319"}]}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "\n\n\n\n\n\n\n\n\n\n\nThe affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clients have access to the DexGate server, could capture traffic. The attacker can later us the information within it to access the application.\n\n\n\n\n\n\n\n\n\n\n\n"}, {"lang": "es", "value": "El producto afectado es vulnerable a transmisi\u00f3n de texto plano de informaci\u00f3n confidencial, lo que puede permitir que un atacante con acceso a la red, donde los clientes tienen acceso al servidor DexGate, pueda capturar el tr\u00e1fico. Posteriormente, el atacante puede utilizar la informaci\u00f3n que contiene para acceder a la aplicaci\u00f3n."}], "lastModified": "2023-10-25T13:39:31.207", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dexma:dexgate:20130114:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1220960-8C57-4BB1-9871-882D2E272F39"}], "operator": "OR"}]}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}