CVE-2023-2538CWE-552

TLS Private Key Accessible to External Parties

Medium · published July 5, 2023

CVSS v3.1
5.8
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the TLS certificate in use by the BMC via forced browsing. This can then be abused to perform Man-in-the-Middle (MitM) attacks against victims that access the web interface through HTTPS.

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.6th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2023-07-05T12:11Z
EPSS history
Timeline
  • 05 JUL 12:11Z
    TLS Private Key Accessible to External Parties
    cvelistv5