« Volver al listado

CVE-2023-46595

Estado: ModificadaMedia (5.4)—

Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can lead to relay domain attacks. Fixed in A32.20 (b570 or above), A32.50 (b390 or above)

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Algosec — Fireflow

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-46595",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security.vulnerabilities@algosec.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.9,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.5,
        "exploitabilityScore": 0.4
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 5.4,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.7,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "security.vulnerabilities@algosec.com",
      "affectedData": [
        {
          "vendor": "Algosec",
          "product": "Algosec FireFlow",
          "versions": [
            {
              "status": "affected",
              "version": "A32.20, A32.50"
            }
          ],
          "platforms": [
            "64 bit",
            "Linux"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-11-02T08:15:08.040",
  "references": [
    {
      "url": "https://cwe.mitre.org/data/definitions/79.html",
      "source": "security.vulnerabilities@algosec.com"
    },
    {
      "url": "https://cwe.mitre.org/data/definitions/79.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security.vulnerabilities@algosec.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can lead to relay domain attacks. Fixed in A32.20 (b570 or above),  A32.50 (b390 or above)"
    },
    {
      "lang": "es",
      "value": "La fuga de Net-NTLM en Fireflow A32.20 y A32.50 permite a un atacante obtener las credenciales de dominio de la víctima y el hash Net-NTLM, lo que puede provocar ataques de dominio de retransmisión."
    }
  ],
  "lastModified": "2026-06-17T06:31:10.670",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:algosec:fireflow:a32.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F57DA17-E133-43D9-AC12-60CBD0FBC253"
            },
            {
              "criteria": "cpe:2.3:a:algosec:fireflow:a32.50:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3144E50-DB4B-4342-8147-7604003EC8D7"
            },
            {
              "criteria": "cpe:2.3:a:algosec:fireflow:a32.60:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8DF7FEFC-C3D7-490D-BE7C-1FE5EBB3B7F2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security.vulnerabilities@algosec.com"
}