CVE-2023-44098CWE-200

Vulnerability of missing encryption in the card management module

High · published November 8, 2023

CVSS v3.1
7.5
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confidentiality.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00203 · 9.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-11-08T09:02Z
EPSS history
Timeline
  • 08 NOV 09:02Z
    Vulnerability of missing encryption in the card management module
    cvelistv5