CVE-2023-4215CWE-1295

Advantech WebAccess Debug Messages Revealing Unnecessary Information

Medium · published October 16, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
46.1
In the wild
Unconfirmed
What it is

Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability that could leak user credentials.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00563 · 46.1th percentile
Weakness
CWE-1295 · Debug Messages Revealing Unnecessary Information
Published
2023-10-16T23:40Z
EPSS history
Timeline
  • 16 OCT 23:40Z
    Advantech WebAccess Debug Messages Revealing Unnecessary Information
    cvelistv5