Lucene search

K
cve[email protected]CVE-2023-24567
HistoryMar 01, 2023 - 3:15 p.m.

CVE-2023-24567

2023-03-0115:15:11
CWE-200
CWE-668
web.nvd.nist.gov
25
cve-2023-24567
dell networker
rabbitmq
vulnerability
nvd
remote access
disclosure

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.8%

Dell NetWorker versions 19.5 and earlier contain ‘RabbitMQ’ version disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and may launch target-specific attacks.

Affected configurations

NVD
Node
dellemc_networkerRange<19.6virtual

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "NetWorker AuthC",
      "NetWorker Server"
    ],
    "product": "Dell NetWorker, NVE",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "19.5 and earlier versions"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.8%

Related for CVE-2023-24567