Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat.
References
| Link | Resource |
|---|---|
| https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds.html | Not Applicable |
| https://talk.plesk.com/threads/why-in-plesk-firehouse-aws-keys-are-public.369925/ | Vendor Advisory |
Configurations
History
07 Nov 2023, 04:21
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat. |
26 Sep 2023, 15:50
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-668 | |
| First Time |
Plesk
Plesk onyx |
|
| References | (MISC) https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds.html - Not Applicable | |
| References | (MISC) https://talk.plesk.com/threads/why-in-plesk-firehouse-aws-keys-are-public.369925/ - Vendor Advisory | |
| CPE | cpe:2.3:a:plesk:onyx:17.8.11:*:*:*:*:*:*:* |
22 Sep 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-22 06:15
Updated : 2024-04-11 01:21
NVD link : CVE-2023-43784
Mitre link : CVE-2023-43784
CVE.ORG link : CVE-2023-43784
JSON object : View
Products Affected
plesk
- onyx
CWE
CWE-668
Exposure of Resource to Wrong Sphere