CVE-2023-3761
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk32th percentile — higher than 32% of all known CVEs
Summary
A vulnerability was found in Intergard SGS 8.7.0, affecting some unknown functionality of the Password Change Handler component. Manipulation leads to cleartext transmission of sensitive information.
Risk Assessment
An attacker may remotely exploit this vulnerability, posing a risk of exposing confidential data. Although the complexity of the attack is high, the disclosure of the exploit may increase the risk of its use.
Recommendation
It is recommended to monitor and update the Password Change Handler component and implement additional security measures to protect against potential attacks.
Original NVD description (English source)
A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password Change Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-234446 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.