CVE-2023-3350

A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the password hashes coded with AES-CBC-128 bits algorithm, which can be decrypted with a .NET function, obtaining the username's password in plain text.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-ibermatica-rps-2019	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ayesa:ibermatica_rps:2019:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-10-03 14:15

Updated : 2023-10-05 00:58

NVD link : CVE-2023-3350

Mitre link : CVE-2023-3350

CVE.ORG link : CVE-2023-3350

JSON object : View

Products Affected

ayesa

ibermatica_rps

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2023-3350", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "cve-coordination@incibe.es", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 3.9}]}, "published": "2023-10-03T14:15:10.927", "references": [{"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-ibermatica-rps-2019", "tags": ["Third Party Advisory"], "source": "cve-coordination@incibe.es"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the password hashes coded with AES-CBC-128 bits algorithm, which can be decrypted with a .NET function, obtaining the username's password in plain text."}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad de problema criptogr\u00e1fico en IBERMATICA RPS que afecta a la versi\u00f3n 2019. Al descargar primero el archivo de registro, un atacante podr\u00eda recuperar la consulta SQL enviada a la aplicaci\u00f3n en texto plano. Este archivo de registro contiene los hash de la contrase\u00f1a codificados con el algoritmo AES-CBC-128 bits, los cuales pueden ser descifrados con una funci\u00f3n .NET, obteniendo la contrase\u00f1a del nombre de usuario en texto plano."}], "lastModified": "2023-10-05T00:58:54.997", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ayesa:ibermatica_rps:2019:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A27BE43-C805-4D83-A2A2-AD6ADD243568"}], "operator": "OR"}]}], "sourceIdentifier": "cve-coordination@incibe.es"}