CVE-2024-0935

Published: Feb 1, 2024

Modified: Aug 1, 2024

PUBLISHED

CVSS v3.1

4.4

MEDIUM

Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024

Vendor	Product	Versions
Dassault Systèmes	DELMIA Apriso	affected `Apriso 2019 Golden - <= Apriso 2019 SP5` affected `Apriso 2020 Golden - <= Apriso 2020 SP4` affected `Apriso 2021 Golden - <= Apriso 2021 SP3` affected `Apriso 2022 Golden - <= Apriso 2022 SP3` affected `Apriso 2023 Golden - <= Apriso 2023 SP2` +1 more versions

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.