CVE-2023-6375

Tyler Technologies Court Case Management Plus may store backups in a location that can be accessed by a remote, unauthenticated attacker. Backups may contain sensitive information such as database credentials.

Score

CVSS 3.1 7.5 High

Status

Modified - 9119a7d8-5eab-497f-8521-727c672e3725

Published

2023-11-30

Last modified

2024-08-02

Weaknesses

CWE-552

Affected products

• Court Case Management Plus (Tyler Technologies)
• Court Case Management Plus (Tylertech)

References

• https://github.com/qwell/disorder-in-the-court/blob/main/README-TylerTechnologies.md
• https://techcrunch.com/2023/11/30/us-court-records-systems-vulnerabilities-exposed-sealed-documents/
• https://www.cisa.gov/news-events/alerts/2023/11/30/multiple-vulnerabilities-affecting-web-based-court-case-and-document…
• https://www.tylertech.com/solutions/courts-public-safety/courts-justice