Lucene search

[email protected]CVE-2023-26467

HistoryApr 10, 2023 - 10:15 p.m.

CVE-2023-26467

2023-04-1022:15:09

CWE-345

[email protected]

web.nvd.nist.gov

cve-2023-26467

man-in-the-middle

traffic redirection

compromised configuration

nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

7.9 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

A man in the middle can redirect traffic to a malicious server in a compromised configuration.

Affected configurations

NVD

Node

pegasynchronization_engineRange3.1.1–3.1.30

CPENameOperatorVersion
pega:synchronization_enginepega synchronization enginelt3.1.30

CPE	Name	Operator	Version
pega:synchronization_engine	pega synchronization engine	lt	3.1.30

CNA Affected

[
  {
    "vendor": "Pegasystems",
    "product": "RPA: Synchronization Engine",
    "versions": [
      {
        "version": "3.1.1",
        "status": "affected",
        "lessThan": "unspecified",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThan": "3.1.28",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

support.pega.com/support-doc/pega-security-advisory-b23-robotics-and-workforce-intelligence-local-privilege

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

7.9 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

Related for CVE-2023-26467

nvd1 prion1 cvelist1