CVE-2023-3655CWE-749

Unauthenticated Remote Database Exfiltration

High · published October 3, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a dangerous methods, that allows to leak the database (system settings, user accounts,...). This vulnerability can be triggered by an HTTP endpoint exposed to the network.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00572 · 46.6th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2023-10-03T07:53Z
EPSS history
Timeline
  • 03 OCT 07:53Z
    Unauthenticated Remote Database Exfiltration
    cvelistv5