go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

e-Excellence U-Office Force - Error Message Leakage

TVN ID TVN-202308001
CVE ID CVE-2023-32755
CVSS 5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products U-Office Force: 20.0.7668D
Description e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command.
Solution Update version to 24.50SP1 or later
Credit Kun Xian Lin(DEVCORE)
Public Date 2023-09-19
Top