CVE-2023-1663

MEDIO 5.3CVE-2023-1663 · Published 29/03/2023 · updated 17/06/2026

In breve

CVE-2023-1663 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda coverity (synopsys).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.43%, superiore al 37.4% delle vulnerabilità.
Correzione: aggiornare a 2023.3.2 o successiva.

Package	Affected versions	Patched versions
coverity synopsys	`< 2023.3.2`	`2023.3.2`

Description

Coverity versions prior to 2023.3.2 are vulnerable to forced browsing, which exposes authenticated resources to unauthorized actors. The root cause of this vulnerability is an insecurely configured servlet mapping for the underlying Apache Tomcat server. As a result, the downloads directory and its contents are accessible. 5.9 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:P/RL:O/RC:C)

References

community.synopsys.com/s/article/Mitigation-for-Coverity-Platforms-Exposure-to-CVE-2023-1663 · Permissions Required
community.synopsys.com/s/article/SIG-Product-Security-Advisory-CVE-2023-1663-Affecting-Coverity-Platform · Vendor Advisory

Altre vulnerabilità di coverity

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free