CVE-2023-4972

Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users.This issue affects Digital Yepas: before 1.0.1.
References
Link Resource
https://www.usom.gov.tr/bildirim/tr-23-0526 Third Party Advisory
https://www.usom.gov.tr/bildirim/tr-23-0526 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:yepas:digital_yepas:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:36

Type Values Removed Values Added
References () https://www.usom.gov.tr/bildirim/tr-23-0526 - Third Party Advisory () https://www.usom.gov.tr/bildirim/tr-23-0526 - Third Party Advisory

26 Sep 2024, 12:15

Type Values Removed Values Added
Summary (en) Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users.This issue affects all versions. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. (en) Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users.This issue affects Digital Yepas: before 1.0.1.

26 Aug 2024, 14:15

Type Values Removed Values Added
CWE CWE-269 CWE-648
Summary (en) Improper Privilege Management vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users.This issue affects . (en) Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users.This issue affects all versions. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

30 Nov 2023, 09:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 8.2
v2 : unknown
v3 : 9.8

29 Sep 2023, 14:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.8
v2 : unknown
v3 : 8.2
CWE NVD-CWE-noinfo CWE-269

19 Sep 2023, 20:00

Type Values Removed Values Added
First Time Yepas
Yepas digital Yepas
References (MISC) https://www.usom.gov.tr/bildirim/tr-23-0526 - (MISC) https://www.usom.gov.tr/bildirim/tr-23-0526 - Third Party Advisory
CPE cpe:2.3:a:yepas:digital_yepas:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 10.0
v2 : unknown
v3 : 9.8
CWE CWE-269 NVD-CWE-noinfo

15 Sep 2023, 00:31

Type Values Removed Values Added
New CVE

Information

Published : 2023-09-14 20:15

Updated : 2024-11-21 08:36


NVD link : CVE-2023-4972

Mitre link : CVE-2023-4972

CVE.ORG link : CVE-2023-4972


JSON object : View

Products Affected

yepas

  • digital_yepas
CWE
CWE-648

Incorrect Use of Privileged APIs

NVD-CWE-noinfo