Vulnerability Description
Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For Transportation before 23.00.01.25.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bentley | Assetwise Alim For Transportation | < 23.00.01.25 |
| Bentley | Eb System Management Console | < 23.00.02.03 |
Related Weaknesses (CWE)
References
- https://www.bentley.com/advisories/be-2023-0002/Vendor Advisory
- https://www.bentley.com/advisories/be-2023-0002/Vendor Advisory
FAQ
What is CVE-2023-51708?
CVE-2023-51708 is a vulnerability with a CVSS score of 8.6 (HIGH). Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to informatio...
How severe is CVE-2023-51708?
CVE-2023-51708 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-51708?
Check the references section above for vendor advisories and patch information. Affected products include: Bentley Assetwise Alim For Transportation, Bentley Eb System Management Console.