CVE-2023-44038

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-44038
In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://docs.veridiumid.com/docs/v3.5/security-advisory#id-%28v3.52%29SecurityAdvisory-Acknowledgement Vendor Advisory
https://veridiumid.com/veridium-id-authentication-platform/ Product
https://docs.veridiumid.com/docs/v3.5/security-advisory#id-%28v3.52%29SecurityAdvisory-Acknowledgement Vendor Advisory
https://veridiumid.com/veridium-id-authentication-platform/ Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:veridiumid:veridiumad:*:*:*:*:*:*:*:*
History

16 Apr 2025, 15:03

Type Values Removed Values Added
First Time Veridiumid veridiumad
Veridiumid
CPE cpe:2.3:a:veridiumid:veridiumad:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://docs.veridiumid.com/docs/v3.5/security-advisory#id-%28v3.52%29SecurityAdvisory-Acknowledgement - () https://docs.veridiumid.com/docs/v3.5/security-advisory#id-%28v3.52%29SecurityAdvisory-Acknowledgement - Vendor Advisory
References () https://veridiumid.com/veridium-id-authentication-platform/ - () https://veridiumid.com/veridium-id-authentication-platform/ - Product
Information

Published : 2024-04-03 17:15

Updated : 2025-04-16 15:03

NVD link : CVE-2023-44038

Mitre link : CVE-2023-44038

CVE.ORG link : CVE-2023-44038

JSON object : View

Products Affected

veridiumid

  • veridiumad
CWE
NVD-CWE-noinfo