Log in Start free

Vulnerability · Published Oct 3, 2023 · Assigned by INCIBE

CVE-2023-3349Information exposure on IBERMATICA RPS

High 8.2

In plain English

A high-severity information exposure in IBERMATICA RPS 2019 from IBERMATICA. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.5%top 57.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to retrieve sensitive information, such as usernames, IP addresses or SQL queries sent to the application. By accessing the URL /RPS2019Service/status.html, the application enables the logging mechanism by generating the log file, which can be downloaded.

Affected products (as reported)

VendorProductVersions
IBERMATICA IBERMATICA RPS 2019 RPS 2019

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

References