CVE-2023-38884

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 20, 2023
Updated: Nov 30, 2023
CWE ID 639

Summary

CVE-2023-38884 is an Insecure Direct Object Reference (IDOR) vulnerability found in the Community Edition version 9.0 of openSIS Classic. This vulnerability allows an unauthenticated remote attacker to access any student's files by visiting a specific URL path. The vulnerability has a base severity rating of HIGH, with a base score of 7.5, and a confidentiality impact of HIGH. The exploitability score is 3.9, indicating that it is relatively easy to exploit. To remediate this vulnerability, it is recommended to apply the latest patch or update for openSIS Classic to fix the IDOR issue and ensure proper access controls are in place to prevent unauthorized access to student files. The potential danger posed by this vulnerability is the unauthorized access and exposure of sensitive student information, which can lead to privacy breaches and potential misuse of the data by malicious actors.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-38884 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options