Skip to content
OpenAdvisories
High · 8.4 CVE-2023-21408 EUVD-2023-25576GHSA-r546-3c3c-rc3g

Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP

Published Aug 3, 2023 · Updated Oct 17, 2024 · Assigned by Axis

Vendor: Axis Communications AB Product: AXIS License Plate Verifier

Description

Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials
that are used in the integration interface towards 3rd party systems.

Affected products

VendorProductAffectedFixed
Axis Communications AB AXIS License Plate Verifier 2.8.3 or earlier —

References