CVE-2023-28503

🗓️ 29 Mar 2023 20:09:43Reported by rapid7Type

cve🔗 web.nvd.nist.gov👁 70 Views🌐 WEB

Rocket Software UniData & UniVerse versions prior to 8.2.4 build 3003 & 11.3.5 build 1001, 12.2.1 build 2002 allows authentication bypass (<100 chars

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the do_log_on_user() function in the Rocket Software UniData and UniVerse UniRPC database platforms, related to the bypassing of authentication checks, allows attackers to circumvent security restrictions and execute arbitrary commands.	17 Apr 202300:00	–	bdu_fstec
Circl	CVE-2023-28503	30 Mar 202300:16	–	circl
CNNVD	Rocket Software UniData 和 UniVerse 授权问题漏洞	29 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-28503 Authentication bypass in UniRPC's udadmin service	29 Mar 202320:09	–	cvelist
Metasploit	Rocket Software Unidata udadmin_server Authentication Bypass	12 Apr 202319:43	–	metasploit
NVD	CVE-2023-28503	29 Mar 202321:15	–	nvd
OSV	CVE-2023-28503	29 Mar 202321:15	–	osv
Packet Storm	Rocket Software Unidata udadmin_server Authentication Bypass	12 Apr 202300:00	–	packetstorm
Prion	Authentication flaw	29 Mar 202321:15	–	prion
Positive Technologies	PT-2023-2331 · Rocket · Universe +1	29 Mar 202300:00	–	ptsecurity

NVD

Node

rocketsoftware unidataRange≤8.2.4

rocketsoftware universeRange≤11.3.5

rocketsoftware universeRange12.0.0–12.2.1

AND

linux linux_kernelMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "UniData",
    "vendor": "Rocket Software",
    "versions": [
      {
        "lessThan": "8.2.43.3003",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Linux"
    ],
    "product": "UniVerse",
    "vendor": "Rocket Software",
    "versions": [
      {
        "lessThan": "11.3.5.1001",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThan": "12.2.1.2002",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/171854/Rocket-Software-Unidata-udadmin_server-Authentication-Bypass.html
rapid7	www.rapid7.com/blog/post/2023/03/29/multiple-vulnerabilities-in-rocket-software-unirpc-server-fixed/

Parameter	Position	Path	Description	CWE
UNIRPC_USERNAME	path	udadmin	Authentication bypass in UniRPC service allowing login as :local: and arbitrary OS command execution	CWE-287, CWE-798
UNIRPC_UID	path	udadmin	Authentication bypass in UniRPC service allowing login as :local: and arbitrary OS command execution	CWE-287, CWE-798
UNIRPC_GID	path	udadmin	Authentication bypass in UniRPC service allowing login as :local: and arbitrary OS command execution	CWE-287, CWE-798
UNIRPC_ENDPOINT	path	udadmin	Authentication bypass in UniRPC service allowing login as :local: and arbitrary OS command execution	CWE-287, CWE-798

17 Jun 2026 05:47Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

EPSS0.62136

SSVC