1. Home
  2. CVE Database
  3. CVE-2023-41137
HIGH · 8.0

CVE-2023-41137

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server.

Vulnerability Description

Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server.

CVSS Score

8.0

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AppsanywhereAppsanywhere Client1.4.0

Related Weaknesses (CWE)

CWE-321CWE-798

References

FAQ

What is CVE-2023-41137?

CVE-2023-41137 is a vulnerability with a CVSS score of 8.0 (HIGH). Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engineering the client and used to impersonate the AppsAnywhere server.

How severe is CVE-2023-41137?

CVE-2023-41137 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-41137?

Check the references section above for vendor advisories and patch information. Affected products include: Appsanywhere Appsanywhere Client.