2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Competition Management System","vendor":"Finex Media","versions":[{"lessThan":"23.07","status":"affected","version":"0","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:finexmedia:competition_management_system:*:*:*:*:*:*:*:*","matchCriteriaId":"73D09461-53AD-41B1-A0E9-EF403A363624","versionEndExcluding":"23.07","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users.\n\nThis issue affects Competition Management System: before 23.07."}],"id":"CVE-2023-2703","lastModified":"2026-06-17T05:53:14.400","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"iletisim@usom.gov.tr","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2703","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-01-17T16:11:47.713395Z","version":"2.0.3"}}]},"published":"2023-05-23T20:15:09.817","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0283"},{"source":"iletisim@usom.gov.tr","tags":["Third Party Advisory"],"url":"https://www.usom.gov.tr/bildirim/tr-23-0283"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.usom.gov.tr/bildirim/tr-23-0283"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-359"}],"source":"iletisim@usom.gov.tr","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-668"}],"source":"nvd@nist.gov","type":"Secondary"}]}
|