CVE-2023-45596

A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web application allows a remote unauthenticated attacker to access confidential configuration files. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - prodsec@nozominetworks.com

Published

2024-03-05

Last modified

2024-10-17

Weaknesses

CWE-425

Affected products

• Imx6 (Ailux)
• Imx6 Bundle (Ailux)

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2023-45596