CVE-2023-41088
Assigner: icscert
Published: 2023-10-19T18:08:34.103Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: DexGate
vendor: DEXMA
versions: status: affected
version: version 20130114
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Aarón Flecha Menéndez of S21sec reported these vulnerabilities to CISA.
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clients have access to the DexGate server, could capture traffic. The attacker can later us the information within it to access the application.</span>

</span>

</span>

</span>

</span>

</span>


value: 










The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clients have access to the DexGate server, could capture traffic. The attacker can later us the information within it to access the application.












metrics: cvssV3_1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-319
description: CWE-319 Cleartext Transmission of Sensitive Information
type: CWE
source: discovery: UNKNOWN
title: Cleartext Transmission of Sensitive Information in DEXMA DEXGate
x_generator: engine: Vulnogram 0.1.0-dev