CVE-2023-38752

Description

Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view the attribute information of the poster that is set as"non-disclosure" in the system settings.

Related CPE's

ajpcertspecial_interest_group_network_for_analysis_and_liaison********

References

https://www.jpcert.or.jp/press/2023/PR20230807_notice.html

Third Party Advisory

https://jvn.jp/en/jp/JVN83334799/

Third Party Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io