CVE-2023-22897

6.5MEDIUM

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially,

게시됨: 4/12/2023업데이트됨: 2/10/2025
NVD에서 보기MITRE에서 보기

설명

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used.

AI 분석AI 기반

영향받는 제품

securepointunified_threat_management

참조