CVE-2023-41088 MEDIUM

CVE-2023-41088: Cleartext Transmission of Sensitive Information in DEXMA DEXGate

Vendor Dexma
Product DexGate
Weakness CWE-319 · Cleartext transmission
Published October 19, 2023
Last update September 11, 2024

CVSS base score

6.3/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow an attacker with access to the network, where clients have access to the DexGate server, could capture traffic. The attacker can later us the information within it to access the application.

Key dates

02Disclosure timeline

October 19, 2023 CVE published
September 11, 2024 Record updated