CVE-2023-3655 — Unauthenticated Remote Database Exfiltration

CVE-2023-3655

Unauthenticated Remote Database Exfiltration PUBLISHED

Description (CNA)

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are affected by a dangerous methods, that allows to leak the database (system settings, user accounts,...). This vulnerability can be triggered by an HTTP endpoint exposed to the network.

Affected (CNA)

Vendor / product	Versions
PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH / cashIT! - serving solutions.	affected 0 through 03.A06rks 2023.02.37

CWE

CWE-749

References

https://www.cashit.at/
https://doi.org/10.35011/ww2q-d522

ADP enrichment

CVE

No English description supplied.

https://www.cashit.at/
https://doi.org/10.35011/ww2q-d522

CISA-ADP

No English description supplied.

No references supplied.