CVE-2023-21408 HIGH

CVE-2023-21408: Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP

Vendor Axis Communications Ab
Product AXIS License Plate Verifier
Published August 3, 2023
Last update October 17, 2024
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems.

Key dates

02Disclosure timeline

August 3, 2023 CVE published
October 17, 2024 Record updated