{ "id": "CVE-2023-45219", "sourceIdentifier": "f5sirt@f5.com", "published": "2023-10-10T13:15:22.297", "lastModified": "2023-10-10T13:41:53.337", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "\nExposure of Sensitive Information vulnerability exist in an undisclosed BIG-IP TMOS shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information.\u00a0\u00a0\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n\n\n\n" } ], "metrics": { "cvssMetricV31": [ { "source": "f5sirt@f5.com", "type": "Primary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM" }, "exploitabilityScore": 0.8, "impactScore": 3.6 } ] }, "weaknesses": [ { "source": "f5sirt@f5.com", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-200" } ] } ], "references": [ { "url": "https://my.f5.com/manage/s/article/K20307245", "source": "f5sirt@f5.com" } ] }