CVE-2023-2703

Published May 23, 2023

Last updated 2 years ago

Overview

Description: Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.This issue affects Competition Management System: before 23.07.
Source: iletisim@usom.gov.tr
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Weaknesses

iletisim@usom.gov.tr: CWE-359
nvd@nist.gov: CWE-668

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:finexmedia:competition_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "73D09461-53AD-41B1-A0E9-EF403A363624",
            "versionEndExcluding": "23.07"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References