CVE-2023-48166

Published Jan 12, 2024

Last updated 10 months ago

Overview

Description: A directory traversal vulnerability in the SOAP Server integrated in Atos Unify OpenScape Voice V10 before V10R3.26.1 allows a remote attacker to view the contents of arbitrary files in the local file system. An unauthenticated attacker might obtain sensitive files that allow for the compromise of the underlying system.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Weaknesses

nvd@nist.gov: CWE-22

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:unify:openscape_voice:10.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "98171884-CD1A-48B4-934B-309C7D14DCFD"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References