CVE-2023-3064

Summary

Anonymous user may get the list of existing users managed by the application, that could ease further attacks (see CVE-2023-3065 and 3066)This issue affects Mobatime mobile application AMXGT100 through 1.3.20.

Affected Software

Weaknesses

• CWE-200: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

ADP Enrichment

CVE Program Container

Additional References

• https://borelenzo.github.io/stuff/2023/06/02/cve-2023-3064_65_66.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://borelenzo.github.io/stuff/2023/06/02/cve-2023-3064_65_66.html

• ←Previous
• Next→