Description

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.This issue affects Competition Management System: before 23.07.

Related CPE's

a

finexmedia

competition_management_system

Vulnerable

References

https://www.usom.gov.tr/bildirim/tr-23-0283

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-359

[email protected]

Secondary
CWE-668

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-05-23T20:15:09.817

1 year ago

Last modified

2023-08-02T17:15:46.487

1 year ago