CVE-2023-40235

CVE-2023-40235 is an NTLM Hash Disclosure vulnerability affecting ArchiMate Archi versions prior to 5.1.0. When parsing project files, an attacker can craft a malicious XMLNS value pointing to a UNC path, causing the application to attempt authentication with the current user's NTLM hash if the share server does not accept guest accounts. This vulnerability has a CVSS score of 6.5 (Medium), indicating a high potential for sensitive information disclosure (NTLM hashes) with low attack complexity, requiring user interaction. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.