CVE-2023-37224

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via the log files.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://archerirm.comProduct
https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362Vendor Advisory
https://archerirm.comProduct
https://www.archerirm.community/t5/security-advisories/archer-update-for-multiple-vulnerabilities/ta-p/702362Vendor Advisory

Timeline

Published: Jul 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-372256.1Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links.CVE-2023-372269.8Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.CVE-2023-372279.8Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.CVE-2023-372298.8Loftware Spectrum before 5.1 allows SSRF.CVE-2023-372308.8Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.CVE-2023-372319.8Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.CVE-2023-372327.5Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.CVE-2023-372338.8Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.CVE-2023-372349.8Loftware Spectrum through 4.6 has unprotected JMX Registry.CVE-2023-372377.2In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and ex CVE-2023-372385.3Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module. Successful exploita CVE-2023-372397.5Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to c