CVE-2023-28900 — Nickname Disclosure on the Backend Automotive Server

CVE-2023-28900

Nickname Disclosure on the Backend Automotive Server PUBLISHED

Description (CNA)

The Skoda Automotive cloud contains a Broken Access Control vulnerability, allowing to obtain nicknames and other user identifiers of Skoda Connect service users by specifying an arbitrary vehicle VIN number.

Affected (CNA)

Vendor / product	Versions
Škoda Auto / Škoda Connect	affected 0

CWE

CWE-200

References

https://asrg.io/security-advisories/cve-2023-28900

ADP enrichment

CVE

No English description supplied.

https://asrg.io/security-advisories/cve-2023-28900

CISA-ADP

No English description supplied.

No references supplied.