CVE-2023-6376 Henschen & Associates court document management software cache uses predictable file names
Remote attackers can access restricted court documents by predicting cache file names in Henschen & Associates software.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-6376?
CVE-2023-6376 is a medium-severity vulnerability in Henschen & Associates court document management software, published on 30 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Henschen & Associates court document management software does not sufficiently randomize file names of cached documents, allowing a remote, unauthenticated attacker to access restricted documents.
Weakness: CWE-330
Which versions are affected by CVE-2023-6376?
It affects 1 product.
Products include Henschen Court Document Management.
How do I fix CVE-2023-6376?
No fix has been published for CVE-2023-6376 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-6376 being exploited?
There is no known exploitation of CVE-2023-6376 in the wild and no public exploit code.
Sources
Also known as GHSA-vqf7-7684-3mjq.