CVE-2023-29064

CVSS 3.1 Score 4.1 of 10 (medium)

Details

Published Nov 28, 2023
Updated: Dec 5, 2023
CWE ID 798

Summary

CVE-2023-29064 is a vulnerability found in the FACSChorus software, affecting products with the IDs trfa3O, trfa3M, trfa3N, and trfa3L. The vulnerability allows sensitive information stored in plaintext to be accessed by a threat actor. This includes tokens and passwords for administrative accounts. The base severity of this vulnerability is medium with a base score of 4.1 according to [email protected]. The exploitability score is 0.7, indicating a relatively low level of difficulty for an attacker to exploit this vulnerability. The potential danger lies in the unauthorized access to sensitive information and the potential compromise of administrative accounts, which can lead to further security breaches and unauthorized actions within an organization's system. Remediation steps should include implementing encryption for sensitive information storage and ensuring that hardcoded credentials are not used in the application.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-29064 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options