CVE-2023-42480

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Nov 14, 2023
Updated: Nov 20, 2023
CWE ID 307

Summary

CVE-2023-42480 is a cyber vulnerability that affects the NetWeaver AS Java Logon application version 7.50. It allows an unauthenticated attacker to potentially brute force the login functionality and identify legitimate user IDs. The impact of this vulnerability is primarily on confidentiality, with no impact on integrity or availability. The risk score for this vulnerability is 26, indicating a medium severity level. The base score is 5.3, with a base severity of MEDIUM and a confidentiality impact of LOW. The exploitability score is 3.9, suggesting a low attack complexity and no privileges required. To remediate the vulnerability, organizations should apply the necessary patches or updates provided by the software vendor to mitigate the risk of unauthorized access and potential data breaches.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-42480 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options