CVE-2023-36043

2023-11-1418:15:34

CWE-200

CWE-668

[email protected]

web.nvd.nist.gov

cve-2023-36043

open management infrastructure

information disclosure

vulnerability

nvd

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

Percentile

10.4%

JSON

Open Management Infrastructure Information Disclosure Vulnerability

Affected configurations

Vulners

NVD

Node

microsoftsystem_center_operations_managerMatch2022

Node

microsoftsystem_center_operations_managerMatch2019

Node

microsoftsystem_center_operations_managerMatch2016

VendorProductVersionCPE
microsoftsystem_center_operations_manager_(scom)_2022*cpe:2.3:a:microsoft:system_center_operations_manager_(scom)_2022:*:*:*:*:*:*:*:*
microsoftsystem_center_operations_manager_(scom)_2019*cpe:2.3:a:microsoft:system_center_operations_manager_(scom)_2019:*:*:*:*:*:*:*:*
microsoftsystem_center_operations_manager_(scom)_2016*cpe:2.3:a:microsoft:system_center_operations_manager_(scom)_2016:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	system_center_operations_manager_(scom)_2022	*	cpe:2.3:a:microsoft:system_center_operations_manager_(scom)_2022::::::::
microsoft	system_center_operations_manager_(scom)_2019	*	cpe:2.3:a:microsoft:system_center_operations_manager_(scom)_2019::::::::
microsoft	system_center_operations_manager_(scom)_2016	*	cpe:2.3:a:microsoft:system_center_operations_manager_(scom)_2016::::::::

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "System Center Operations Manager (SCOM) 2022",
    "cpes": [
      "cpe:2.3:a:microsoft:system_center_operations_manager:2022:-:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "10.22.0",
        "lessThan": "1.7.3-0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "System Center Operations Manager (SCOM) 2019",
    "cpes": [
      "cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "10.19.0",
        "lessThan": "1.7.3-0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "System Center Operations Manager (SCOM) 2016",
    "cpes": [
      "cpe:2.3:a:microsoft:system_center_operations_manager:2016:-:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "7.6.0",
        "lessThan": "1.7.3-0",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]