Critical Vulnerability: Exposure of Sensitive Data in Public Knowledgebase Puts Access Rights Manager (ARM) at Risk

CVE-2023-40058 · MEDIUM Severity

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager (ARM) if the threat actor is in the same environment.

Learn more about our Web Application Penetration Testing UK.