« Volver al listado

CVE-2023-29484

Estado: ModificadaMedia (6.5)—

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Terminalfour — Terminalfour

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-29484",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-29484",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-16T19:58:16.109345Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-10-16T20:15:14.423",
  "references": [
    {
      "url": "https://docs.terminalfour.com/articles/security-notices/cve-2023-29484/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://docs.terminalfour.com/release-notes/83/16.html",
      "tags": [
        "Release Notes"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://docs.terminalfour.com/articles/security-notices/cve-2023-29484/",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://docs.terminalfour.com/release-notes/83/16.html",
      "tags": [
        "Release Notes"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password."
    },
    {
      "lang": "es",
      "value": "En Terminalfour anterior a 8.3.16, los usuarios LDAP mal configurados pueden iniciar sesión con una contraseña no válida."
    }
  ],
  "lastModified": "2026-06-17T05:50:09.923",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:terminalfour:terminalfour:7.4.0004:qp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15737F32-A5C2-401E-8DF4-F5615AAD6473"
            },
            {
              "criteria": "cpe:2.3:a:terminalfour:terminalfour:8.2.18.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5447EF3-9A0D-46CB-A8DD-F88327D74C97"
            },
            {
              "criteria": "cpe:2.3:a:terminalfour:terminalfour:8.2.18.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7B7456B-FBBB-4074-A268-784EFFCC567A"
            },
            {
              "criteria": "cpe:2.3:a:terminalfour:terminalfour:8.3.11.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCCDDB67-3BBE-43BD-993F-7BF5FEA65169"
            },
            {
              "criteria": "cpe:2.3:a:terminalfour:terminalfour:8.3.14.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0558454-674B-45B6-B223-6458701D90FF"
            },
            {
              "criteria": "cpe:2.3:a:terminalfour:terminalfour:8.3.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E42F0B63-691C-4E14-BCAF-1E3754E11EA4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}