Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For Transportation before 23.00.01.25.
References
| Link | Resource |
|---|---|
| https://www.bentley.com/advisories/be-2023-0002/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Jan 2024, 15:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.bentley.com/advisories/be-2023-0002/ - Vendor Advisory | |
| CPE | cpe:2.3:a:bentley:eb_system_management_console:*:*:*:*:*:*:*:* cpe:2.3:a:bentley:assetwise_alim_for_transportation:*:*:*:*:*:*:*:* |
|
| First Time |
Bentley eb System Management Console
Bentley Bentley assetwise Alim For Transportation |
|
| CWE | CWE-287 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.6 |
22 Dec 2023, 02:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-22 02:15
Updated : 2024-02-28 20:54
NVD link : CVE-2023-51708
Mitre link : CVE-2023-51708
CVE.ORG link : CVE-2023-51708
JSON object : View
Products Affected
bentley
- assetwise_alim_for_transportation
- eb_system_management_console
CWE
CWE-287
Improper Authentication