CVE-2023-43503CWE-319
A vulnerability has been identified in COMOS (All versions < V10.4.4)
Low · published November 14, 2023
What it is
A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks sensitive information such as user and project information in cleartext via UDP.
The record
Technical detail
- CVSS v3.1
- 3.5 · LOW
- Vector
- CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
- CVSS v4.0
- Not supplied
- EPSS
- 0.00309 · 22.5th percentile
- Weakness
- CWE-319 · Cleartext Transmission of Sensitive Information
- Published
- 2023-11-14T11:03Z
EPSS history
Timeline