CVE-2023-42955

Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in to the Admin Console…

Medium · published April 26, 2024

CVSS v3.1
6.1
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in to the Admin Console with an administrator role. This issue has been fixed in FileMaker Server 20.3.1 by eliminating the send of Admin Role passwords in the Node.js socket.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Published
2024-04-26T15:33Z
EPSS history
Timeline
  • 26 APR 15:33Z
    Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in to the Admin Console…
    cvelistv5