Ayesa IBERMATICA RPS 2019
Approved changes feed: RSS · Atom
cpe:2.3:a:ayesa:ibermatica_rps:2019:*:*:*:*:*:*:*part: a version: 2019 update: *
| Vendor | Ayesa (a5252248-0558-5893-92da-19d312f9b8d4) |
|---|---|
| Product | Ibermatica Rps (f46459cf-eb3c-53d7-b441-d07b700c648b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3350 |
vulnerable | 2026-06-08 06:09:39.358583 |
Cryptographic Issues on IBERMATICA RPS
HIGH (8.2)
A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the password hashes coded with AES-CBC-128 bits algorithm, which can be decrypted with a .NET function, obtaining the username's password in plain text.
Published: 2023-10-03T13:26:03.410Z
Updated: 2024-09-23T17:18:21.586Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3349 |
vulnerable | 2026-06-08 06:09:39.357964 |
Information exposure on IBERMATICA RPS
HIGH (8.2)
Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to retrieve sensitive information, such as usernames, IP addresses or SQL queries sent to the application. By accessing the URL /RPS2019Service/status.html, the application enables the logging mechanism by generating the log file, which can be downloaded.
Published: 2023-10-03T13:24:44.830Z
Updated: 2024-09-19T19:47:16.780Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.