CVE-2023-46237

Summary

CVE-2023-46237 is a vulnerability affecting FOG, an open-source cloning and imaging suite. Before version 1.5.10, an endpoint that was designed to provide limited enumeration capabilities to authenticated users was accessible to unauthenticated users. This issue allowed unauthorized users to discover files and their corresponding paths, accessible only to the Apache user group. Version 1.5.10 includes a patch that resolves this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.