CVE-2023-21408 — Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP

CVE-2023-21408

Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP PUBLISHED

Description (CNA)

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems.

Affected (CNA)

Vendor / product	Versions
Axis Communications AB / AXIS License Plate Verifier	affected 2.8.3 or earlier

CWE

No CWE identifiers supplied.

References

https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf

ADP enrichment

CVE

No English description supplied.

https://www.axis.com/dam/public/0b/1c/96/cve-2023-2140712-en-US-409778.pdf

CISA-ADP

No English description supplied.

No references supplied.