CVE-2023-39379

HIGH 7.5CVE-2023-39379 · Published 04/08/2023 · updated 17/06/2026

In short

CVE-2023-39379 is a HIGH (CVSS 7.5) vulnerability affecting software infrastructure manager (fujitsu).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
software infrastructure manager fujitsu	`= 2.8.0.060`	No fix yet

Description

Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As a result, the password for the proxy server that is configured in ISM may be retrieved. Affected products and versions are as follows: Fujitsu Software Infrastructure Manager Advanced Edition V2.8.0.060, Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX V2.8.0.060, and Fujitsu Software Infrastructure Manager Essential Edition V2.8.0.060.

References

jvn.jp/en/jp/JVN38847224 · Third Party Advisory
support.ts.fujitsu.com/IndexProdSecurity.asp · Product

More vulnerabilities in software infrastructure manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free