CVE-2023-4095 MEDIUM

CVE-2023-4095: User enumeration vulnerability in Fujitsu Arconte Áurea

Vendor Fujitsu
Product Arconte Áurea
Weakness CWE-204
Published September 19, 2023
Last update September 25, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an attacker to obtain a list of registered users in the application, obtaining the necessary information to perform more complex attacks on the platform.

Key dates

02Disclosure timeline

September 19, 2023 CVE published
September 25, 2024 Record updated