CVE-2023-31445
Medium
Description
Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have the ability to enumerate all other users and discover e-mail addresses, phone numbers, and privileges of all other users.
SeverityMedium
CVSS5.3
Exploit probability—
ProductCassianetworks Access Controller
PublishedMay 11, 2023
First seenMay 11, 2023
How to fix
Update
- cassianetworks access_controller2.1.1.2203171453 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cassianetworks access_controller | v < 2.1.1.2203171453 | 2.1.1.2203171453 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.