CVE-2023-38257

CVE-2023-38257

High · published July 18, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an unauthenticated user to view profile information, including user login names and encrypted passwords.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00717 · 53.3th percentile
Published
2023-07-18T17:17Z
EPSS history
Timeline
  • 18 JUL 17:17Z
    CVE-2023-38257
    cvelistv5