CVE-2023-29061

概要

参考情報

• bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-software · Vendor Advisory

facschorus のその他の脆弱性

• CVE-2023-29066低 3.5The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account …
• CVE-2023-29065中 4.3The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical …
• CVE-2023-29064中 4.3The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the applicat…
• CVE-2023-29063低 2.4The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PC…
• CVE-2023-29062低 3.8The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action with…