What’s Vulnerable › Vulnerabilities

CVE-2023-51708

• Severity: high (CVSS 8.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-22 · updated 2026-06-17
• Weakness: CWE-287

Description

Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For Transportation before 23.00.01.25.

Affected products

• Bentley Assetwise Alim For Transportation: before 23.00.01.25 — fixed in 23.00.01.25
• Bentley Eb System Management Console: before 23.00.02.03 — fixed in 23.00.02.03

How to fix

Upgrade to a fixed version: Bentley Assetwise Alim For Transportation 23.00.01.25; Bentley Eb System Management Console 23.00.02.03. Check the vendor advisory for mitigations.

References

• https://www.bentley.com/advisories/be-2023-0002/
• https://www.bentley.com/advisories/be-2023-0002/

Get alerted when CVE-2023-51708 or the next vulnerability affects your stack