Lucene search

CVE-2023-23408

🗓️ 14 Mar 2023 17:14:15Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 109 Views🌐 WEB

CVE-2023-23408 Azure Apache Ambari Spoofing Vulnerability NV

Reporter	Title	Published	Views	Family All 10
Vulnrichment	CVE-2023-23408 Azure Apache Ambari Spoofing Vulnerability	14 Mar 202316:55	–	vulnrichment
0day.today	Azure Apache Ambari 2302250400 - Spoofing Exploit	26 Jun 202300:00	–	zdt
Prion	Spoofing	14 Mar 202317:15	–	prion
Microsoft CVE	Azure Apache Ambari Spoofing Vulnerability	14 Mar 202307:00	–	mscve
Cvelist	CVE-2023-23408 Azure Apache Ambari Spoofing Vulnerability	14 Mar 202316:55	–	cvelist
NVD	CVE-2023-23408	14 Mar 202317:15	–	nvd
Exploit DB	Azure Apache Ambari 2302250400 - Spoofing	26 Jun 202300:00	–	exploitdb
Packet Storm	Azure Apache Ambari 2302250400 Spoofing	27 Jun 202300:00	–	packetstorm
Kaspersky	KLA48559 Multiple vulnerabilities in Microsoft Azure	14 Mar 202300:00	–	kaspersky
Rapid7 Blog	Patch Tuesday - March 2023	14 Mar 202323:46	–	rapid7blog

Nvd

Vulners

Node

microsoft azure_hdinsightsMatch-

[
  {
    "vendor": "Microsoft",
    "product": "Azure HDInsight",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0",
        "lessThan": "2302250400",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23408
packetstormsecurity	www.packetstormsecurity.com/files/173134/Azure-Apache-Ambari-2302250400-Spoofing.html

Parameter	Position	Path	Description	CWE
X-Requested-By	header	/api/v1/clusters/cluster_name/services	The vulnerability exploits improper validation of headers allowing spoofing.	CWE-79
Authorization	header	/api/v1/clusters/cluster_name/services	The vulnerability exploits improper validation of headers allowing spoofing.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Mar 2023 17:15Current

5Medium risk

Vulners AI Score5

CVSS34.5

EPSS0.03991

SSVC

CWE-79