CVE-2023-42147 Information disclosure in n/a
An attacker can obtain sensitive information via the login key component in CloudExplorer Lite, potentially compromising user data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-42147?
CVE-2023-42147 is a high-severity vulnerability in n/a, published on 20 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue in CloudExplorer Lite 1.3.1 allows an attacker to obtain sensitive information via the login key component.
Weakness: CWE-319
Which versions are affected by CVE-2023-42147?
It affects 1 product.
Products include Fit2cloud Cloudexplorer Lite.
How do I fix CVE-2023-42147?
No fix has been published for CVE-2023-42147 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-42147 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-42147 exists.
Other vulnerabilities in n/a
- CVE-2023-38692 Command injection vulnerability in module management function in CloudExplorer Lite
- CVE-2023-2845 Improper Access Control in cloudexplorer-dev/cloudexplorer-lite
- CVE-2023-50612 Privilege escalation in n/a
- CVE-2023-44397 CloudExplorer Lite permission bypass vulnerability
- CVE-2023-39519 CloudExplorer Lite sensitive information leakage vulnerability
Sources
Also known as GHSA-fv38-2xxm-x52m.