« Volver al listado

CVE-2023-39415

Estado: ModificadaAlta (7.5)—

Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Northgrid — Proself

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-39415",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-39415",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-08T16:13:41.089575Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "North Grid Corporation",
          "product": "Proself Enterprise/Standard Edition",
          "versions": [
            {
              "status": "affected",
              "version": "Ver5.61 and earlier"
            }
          ]
        },
        {
          "vendor": "North Grid Corporation",
          "product": "Proself Gateway Edition",
          "versions": [
            {
              "status": "affected",
              "version": "Ver1.62 and earlier"
            }
          ]
        },
        {
          "vendor": "North Grid Corporation",
          "product": "Proself Mail Sanitize Edition",
          "versions": [
            {
              "status": "affected",
              "version": "Ver1.07 and earlier"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:northgrid:proself_enterprise_standard_edition:*:*:*:*:*:*:*:*"
          ],
          "vendor": "northgrid",
          "product": "proself_enterprise_standard_edition",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "5.61",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:northgrid:proself_gateway_edition:*:*:*:*:*:*:*:*"
          ],
          "vendor": "northgrid",
          "product": "proself_gateway_edition",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "1.62",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:northgrid:proself_mail_sanitize_edition:*:*:*:*:*:*:*:*"
          ],
          "vendor": "northgrid",
          "product": "proself_mail_sanitize_edition",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "1.07",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2023-08-18T10:15:11.620",
  "references": [
    {
      "url": "https://jvn.jp/en/jp/JVN19661362/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.proself.jp/information/149/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://www.proself.jp/information/150/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://jvn.jp/en/jp/JVN19661362/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.proself.jp/information/149/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.proself.jp/information/150/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de autenticación incorrecta en Proself Enterprise/Standard Edition Ver5.61 y anteriores, Proself Gateway Edition Ver1.62 y anteriores, y Proself Mail Sanitize Edition Ver1.07 y anteriores permite a un atacante remoto no autenticado iniciar sesión en el Panel de control del producto y realizar una operación no deseada.\n"
    }
  ],
  "lastModified": "2026-06-17T06:12:15.953",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:northgrid:proself:*:*:*:*:mail_sanitize:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "08080859-2BE8-4E98-A71F-55B05FFF34CD",
              "versionEndIncluding": "1.07"
            },
            {
              "criteria": "cpe:2.3:a:northgrid:proself:*:*:*:*:gateway:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62F99405-78A1-4911-8731-AF45ACCEC028",
              "versionEndIncluding": "1.62"
            },
            {
              "criteria": "cpe:2.3:a:northgrid:proself:*:*:*:*:enterprise:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FFCCF32A-D960-4A11-BAE5-253BDED708E6",
              "versionEndIncluding": "5.61"
            },
            {
              "criteria": "cpe:2.3:a:northgrid:proself:*:*:*:*:standard:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDA2D322-61CB-4252-912E-2DAA674DF9B6",
              "versionEndIncluding": "5.61"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp"
}