CVE-2023-40235

MEDIUM EPSS 48.6%
Published Aug 10, 20232y ago · Modified Jun 17, 20262w ago
6.5 CVSS 3.1
Medium
Find Similar
Published Aug 10, 2023 2y ago
Last Modified Jun 17, 2026 2w ago

Description

An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate project file, if the namespace does not match the expected ArchiMate URL, the parser will access the provided resource. If the provided resource is a UNC path pointing to a share server that does not accept a guest account, the host will try to authenticate on the share by using the current user's session. NOTE: this issue occurs because Archi uses an unsafe configuration of the Eclipse Modeling Framework.

CVSS Details

Base Score
6.5
Exploitability
2.8
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
48.6% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Affected Products 1

VendorProductVersionRange
opengrouparchi* <5.1.0

References 4

  • github.com https://github.com/archimatetool/archi/commit/bcab676beddfbeddffecacf755b6692f0b0151f1
    Patch
  • github.com https://github.com/archimatetool/archi/compare/release_5.0.2...release_5.1.0
    Release Notes
  • github.com https://github.com/archimatetool/archi/issues/946
    ExploitIssue TrackingVendor Advisory
  • github.com https://github.com/eclipse-emf/org.eclipse.emf/issues/8
    ExploitIssue TrackingThird Party Advisory

Remediation

  • github.com https://github.com/archimatetool/archi/commit/bcab676beddfbeddffecacf755b6692f0b0151f1
    Patch