CVE-2023-4392
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk40th percentile — higher than 40% of all known CVEs
Summary
A vulnerability was found in Control iD Gerencia Web 1.30, affecting an unknown functionality of the Cookie Handler component. Manipulation leads to cleartext storage of sensitive information.
Risk Assessment
An attacker may remotely exploit this vulnerability, posing a risk of sensitive data exposure. Although exploitation is difficult, the public disclosure of the exploit increases the risk.
Recommendation
It is recommended to monitor the system for unauthorized access and implement additional security measures for the Cookie Handler component.
Original NVD description (English source)
A vulnerability was found in Control iD Gerencia Web 1.30 and classified as problematic. Affected by this issue is some unknown functionality of the component Cookie Handler. The manipulation leads to cleartext storage of sensitive information. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-237380. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.