Vulnerability Description
By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account.
CVSS Score
6.2
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ptc | Vuforia Studio | < 9.9 |
Related Weaknesses (CWE)
References
- https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13Broken Link
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13Third Party AdvisoryUS Government Resource
- https://https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-13Broken Link
FAQ
What is CVE-2023-29152?
CVE-2023-29152 is a vulnerability with a CVSS score of 6.2 (MEDIUM). By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account.
How severe is CVE-2023-29152?
CVE-2023-29152 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-29152?
Check the references section above for vendor advisories and patch information. Affected products include: Ptc Vuforia Studio.