CVE-2023-51708
High
Description
Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For Transportation before 23.00.01.25.
SeverityHigh
CVSS8.6
Exploit probability—
ProductBentley Assetwise Alim For Transportation
PublishedDec 22, 2023
First seenDec 22, 2023
How to fix
Update
- bentley assetwise_alim_for_transportation23.00.01.25 or later
- bentley eb_system_management_console23.00.02.03 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bentley assetwise_alim_for_transportation | v < 23.00.01.25 | 23.00.01.25 |
| bentley eb_system_management_console | v < 23.00.02.03 | 23.00.02.03 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.