CVE-2023-2025CWE-200
Exposure of Sensitive Information in OpenBlue Enterprise Manager Data Collector
Medium · published May 18, 2023
What it is
OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose sensitive information to an unauthorized user under certain circumstances.
The record
Technical detail
- CVSS v3.1
- 5.0 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00515 · 43.0th percentile
- Weakness
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
- Published
- 2023-05-18T20:50Z
EPSS history
Timeline