Lucene search

[email protected]CVE-2023-45352

HistoryOct 09, 2023 - 4:15 a.m.

CVE-2023-45352

2023-10-0904:15:54

CWE-22

[email protected]

web.nvd.nist.gov

atos

unify

openscape

management portal

v10

r4.17.0

r5.1.0

cve-2023-45352

ocmp-6592

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

JSON

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This is also known as OCMP-6592.

Affected configurations

NVD

Node

atosunify_openscape_common_managementMatch10-

CPENameOperatorVersion
atos:unify_openscape_common_managementatos unify openscape common managementeq10

CPE	Name	Operator	Version
atos:unify_openscape_common_management	atos unify openscape common management	eq	10

References

networks.unify.com/security/advisories/OBSO-2306-02.pdf

www.news.de/technik/857003738/unify-openscape-common-management-platform-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-update-zu-bekannten-schwachstellen-und-sicherheitsluecken-vom-03-07-2023/1/

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

JSON

Related for CVE-2023-45352

cvelist1 prion1 nvd1