CVE-2023-5514CWE-209

The response messages received from the eSOMS report generation using certain parameter queries with full file path can be abused for enumerating the local…

Medium · published November 1, 2023

CVSS v3.1
5.3
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

The response messages received from the eSOMS report generation using certain parameter queries with full file path can be

abused for enumerating the local file system structure.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.4th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2023-11-01T02:40Z
EPSS history
Timeline
  • 01 NOV 02:40Z
    The response messages received from the eSOMS report generation using certain parameter queries with full file path can be abused for enumerating the local…
    cvelistv5