Unrated severityNVD Advisory· Published Apr 26, 2024· Updated Aug 2, 2024

CVE-2023-42955

Description

Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in to the Admin Console with an administrator role. This issue has been fixed in FileMaker Server 20.3.1 by eliminating the send of Admin Role passwords in the Node.js socket.

Affected products

Filemaker/Filemaker Serverllm-fuzzy
Range: <20.3.1
Claris/FileMaker Serverv5
Range: unspecified

Patches

Vulnerability mechanics

References

support.claris.com/s/article/Administrator-role-passwords-being-exposed-when-logged-into-the-Admin-Consolemitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000