CVE-2023-40647

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Oct 8, 2023
Updated: Oct 11, 2023
CWE ID 862

Summary

CVE-2023-40647 is a cyber vulnerability that affects messaging applications, specifically the products lAMRr5, sYyJEl, sYyJE8, and fWGaF5. It involves a missing permission check, which could potentially lead to local information disclosure without requiring additional execution privileges. The vulnerability has a medium severity rating with a base score of 5.5 and a high confidentiality impact. It has a low attack complexity and requires low privileges to exploit. The potential danger it poses to an organization is the unauthorized disclosure of sensitive information. No remediation steps or specific details on the danger it poses are provided in the source text.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-40647 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options