CVE-2023-44303

Summary

CVE-2023-44303 is a new vulnerability affecting RVTools, Version 3.9.2 and above. This issue involves a sensitive data exposure in the password encryption utility and main application. An unauthenticated attacker can access encrypted passwords from a user's system and potentially disclose them in clear text. The root cause is an incomplete fix for a previous vulnerability, CVE-2020-27688. Users should promptly update RVTools to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.