CVE-2023-21409

Insufficient file permissions leak administrator-privileged credentials in AXIS License Verifier ACAP

High · published August 3, 2023

CVSS v3.1
8.4
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator

credentials allowing the configuration of the application.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.8th percentile
Published
2023-08-03T06:48Z
EPSS history
Timeline
  • 03 AUG 06:48Z
    Insufficient file permissions leak administrator-privileged credentials in AXIS License Verifier ACAP
    cvelistv5