7.5

CVE-2023-39379

Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As a result, the password for the proxy server that is configured in ISM may be retrieved. Affected products and versions are as follows: Fujitsu Software Infrastructure Manager Advanced Edition V2.8.0.060, Fujitsu Software Infrastructure Manager Advanced Edition for PRIMEFLEX V2.8.0.060, and Fujitsu Software Infrastructure Manager Essential Edition V2.8.0.060.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fujitsu ≫ Software Infrastructure Manager Version 2.8.0.060 SwEdition advanced SwPlatform -
Fujitsu ≫ Software Infrastructure Manager Version 2.8.0.060 SwEdition advanced SwPlatform primeflex
Fujitsu ≫ Software Infrastructure Manager Version 2.8.0.060 SwEdition essential
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.346
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

https://jvn.jp/en/jp/JVN38847224/
Third Party Advisory
https://support.ts.fujitsu.com/IndexProdSecurity.asp?lng=en
Product