Lucene search
HistoryJan 19, 2024 - 8:15 p.m.
CVE-2023-33295
cohesity
dataprotect
access control
vulnerability
tls certificate validation
cve-2023-33295
nvd
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.3%
Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation.
Affected configurations
Node
cohesitycohesity_dataplatformRange≤7.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| cohesity:cohesity_dataplatform | cohesity cohesity dataplatform | le | 7.0.1 |
Related
cvelist
cvelist
CVE-2023-33295
2024-01-19 00:00:00
nvd
nvd
CVE-2023-33295
2024-01-19 20:15:10
prion
prion
Improper access control
2024-01-19 20:15:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.3%
Related for CVE-2023-33295