CVE-2023-47298 | THREATINT

Description

An issue in NCR Terminal Handler 1.5.1 allows a low-level privileged authenticated attacker to query the SOAP API endpoint to obtain information about all of the users of the application including their usernames, roles, security groups and account statuses.

PUBLISHED Reserved 2023-11-06 | Published 2025-06-23 | Updated 2025-06-24 | Assigner mitre

References

drive.google.com/...huxo-lg4th-Cswimoqqzkot/view?usp=sharing

github.com/...rch/blob/main/CVE-2023-47298/CVE-2023-47298.md

cve.org (CVE-2023-47298)

nvd.nist.gov (CVE-2023-47298)

Download JSON