CVE-2023-37224

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the log files.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-372256.1Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links.CVE-2023-372269.8Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.CVE-2023-372279.8Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.CVE-2023-372298.8Loftware Spectrum before 5.1 allows SSRF.CVE-2023-372308.8Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.CVE-2023-372319.8Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.CVE-2023-372327.5Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.CVE-2023-372338.8Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.CVE-2023-372349.8Loftware Spectrum through 4.6 has unprotected JMX Registry.CVE-2023-372377.2In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and exCVE-2023-372385.3Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploitaCVE-2023-372397.5Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to c