CVE-2023-4392

CVE-2023-4392 is a problematic vulnerability affecting Control iD Gerencia Web version 1.30, specifically within its Cookie Handler component. This flaw allows for the cleartext storage of sensitive information, potentially leading to data exposure. Rated with a CVSS score of 5.3 (Medium), exploitation requires low privileges and has high impact on confidentiality, though attack complexity is high. While the exploit has been publicly disclosed, its exploitation is considered difficult, and there is no evidence of active exploitation, exploit code in common frameworks, or significant community discussion.