Lucene search

MitreCVE-2023-43762

HistorySep 22, 2023 - 5:15 a.m.

CVE-2023-43762

2023-09-2205:15:09

mitre

web.nvd.nist.gov

cve-2023-43762

withsecure

remote code execution

unauthenticated

web server

policy manager 15

policy manager proxy 15

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.014

Percentile

86.7%

JSON

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.

Affected configurations

Nvd

Node

withsecuref-secure_policy_managerMatch15.00linux_kernel

withsecuref-secure_policy_managerMatch15.00windows

withsecurepolicy_manager_proxyMatch15.00linux_kernel

withsecurepolicy_manager_proxyMatch15.00windows

VendorProductVersionCPE
withsecuref-secure_policy_manager15.00cpe:2.3:a:withsecure:f-secure_policy_manager:15.00:*:*:*:*:linux_kernel:*:*
withsecuref-secure_policy_manager15.00cpe:2.3:a:withsecure:f-secure_policy_manager:15.00:*:*:*:*:windows:*:*
withsecurepolicy_manager_proxy15.00cpe:2.3:a:withsecure:policy_manager_proxy:15.00:*:*:*:*:linux_kernel:*:*
withsecurepolicy_manager_proxy15.00cpe:2.3:a:withsecure:policy_manager_proxy:15.00:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
withsecure	f-secure_policy_manager	15.00	cpe:2.3:a:withsecure:f-secure_policy_manager:15.00:::::linux_kernel::
withsecure	f-secure_policy_manager	15.00	cpe:2.3:a:withsecure:f-secure_policy_manager:15.00:::::windows::
withsecure	policy_manager_proxy	15.00	cpe:2.3:a:withsecure:policy_manager_proxy:15.00:::::linux_kernel::
withsecure	policy_manager_proxy	15.00	cpe:2.3:a:withsecure:policy_manager_proxy:15.00:::::windows::

References

www.withsecure.com/en/support/security-advisories

www.withsecure.com/en/support/security-advisories/cve-2023-43762

www.withsecure.com/en/support/security-advisories/cve-2023-nnn511

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.014

Percentile

86.7%

JSON

Related for CVE-2023-43762