CVE-2023-21408

Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP

High · published August 3, 2023

CVSS v3.1
8.4
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials

that are used in the integration interface towards 3rd party systems.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.7th percentile
Published
2023-08-03T06:45Z
EPSS history
Timeline
  • 03 AUG 06:45Z
    Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP
    cvelistv5