What is CVE-2020-23284?

CVE-2020-23284 is a high-severity vulnerability in Mv Idce, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2021-07-20.

How severe is CVE-2020-23284?

High severity. CVSS v3 base score is 7.5 out of 10.

Information disclosure in Mv Idce

CVE-2020-23284

Information disclosure in aspx pages in MV's IDCE application v1.0 allows an attacker to copy and paste aspx pages in the end of the URL application that connect into the database which reveals internal and sensitive information without logging into the web application.

EPSS: 0.010 (59.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Mv Idce — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-23284?: CVE-2020-23284 is a high-severity vulnerability in Mv Idce, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2021-07-20.
How severe is CVE-2020-23284?: High severity. CVSS v3 base score is 7.5 out of 10.