CVE-2024-0935
Assigner: 3DS
Published: 2024-02-01T13:33:56.772Z
State: PUBLISHED
title: Insertion of Sensitive Information into Log File vulnerabilities affecting DELMIA Apriso Release 2019 through Release 2024
problemTypes: descriptions: cweId: CWE-532
description: CWE-532 Insertion of Sensitive Information into Log File
type: CWE
impacts: capecId: CAPEC-37
descriptions: value: CAPEC-37 Retrieve Embedded Sensitive Data
affected: vendor: Dassault Systèmes
product: DELMIA Apriso
versions: status: affected
version: Apriso 2019 Golden
lessThanOrEqual: Apriso 2019 SP5
versionType: custom
status: affected
version: Apriso 2020 Golden
lessThanOrEqual: Apriso 2020 SP4
versionType: custom
status: affected
version: Apriso 2021 Golden
lessThanOrEqual: Apriso 2021 SP3
versionType: custom
status: affected
version: Apriso 2022 Golden
lessThanOrEqual: Apriso 2022 SP3
versionType: custom
status: affected
version: Apriso 2023 Golden
lessThanOrEqual: Apriso 2023 SP2
versionType: custom
status: affected
version: Apriso 2024 Golden
defaultStatus: unaffected
descriptions: value: Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024
supportingMedia: type: text/html
base64: no
value: Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseSeverity: MEDIUM
baseScore: 4.4
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
source: discovery: EXTERNAL
x_generator: engine: Vulnogram 0.1.0-dev