e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command.
References
Link | Resource |
---|---|
https://www.twcert.org.tw/tw/cp-132-7328-d4112-1.html |
Configurations
No configuration.
History
25 Aug 2023, 07:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-08-25 07:15
Updated : 2023-08-25 12:47
NVD link : CVE-2023-32755
Mitre link : CVE-2023-32755
JSON object : View
Products Affected
No product.
CWE
CWE-209
Generation of Error Message Containing Sensitive Information