Lucene search
K

CVE-2023-40315 ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN

🗓️ 17 Aug 2023 19:04:01Reported by OpenNMSType 
cvelist
 cvelist
🔗 www.cve.org👁 26 Views

CVE-2023-40315 ROLE_FILESYSTEM_EDITOR privilege escalation in OpenMNS Horizon

Related
Affected
Refs
ReporterTitlePublishedViews
Family
0day.today
OpenNMS Horizon 31.0.7 Remote Command Execution Exploit
27 Mar 202400:00
zdt
Circl
CVE-2023-40315
18 Aug 202310:27
circl
CNNVD
Opennms Group OpenNMS 安全漏洞
17 Aug 202300:00
cnnvd
CVE
CVE-2023-40315
17 Aug 202319:04
cve
EUVD
EUVD-2023-2300
3 Oct 202520:07
euvd
Github Security Blog
OpenNMS privilege escalation vulnerability
17 Aug 202321:30
github
Metasploit
OpenNMS Horizon Authenticated RCE
21 Mar 202419:49
metasploit
NVD
CVE-2023-40315
17 Aug 202320:15
nvd
OpenVAS
Moodle < 3.9.17, 3.11 < 3.11.10, 4.0 < 4.0.4 Multiple Vulnerabilities
10 Oct 202200:00
openvas
OSV
GHSA-HF5P-F83X-5Q2G OpenNMS privilege escalation vulnerability
17 Aug 202321:30
osv
Rows per page
[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux"
    ],
    "product": "Horizon",
    "repo": "https://github.com/OpenNMS/opennms",
    "vendor": "The OpenNMS Group",
    "versions": [
      {
        "lessThan": "32.0.2",
        "status": "affected",
        "version": "31.0.8",
        "versionType": "maven"
      },
      {
        "lessThan": "31.0.8",
        "status": "unknown",
        "version": "0",
        "versionType": "maven"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux"
    ],
    "product": "Meridian",
    "repo": "https://github.com/OpenNMS/opennms",
    "vendor": "The OpenNMS Group",
    "versions": [
      {
        "lessThan": "2023.1.5",
        "status": "affected",
        "version": "2023.0.0",
        "versionType": "maven"
      },
      {
        "lessThan": "2023.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "maven"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Aug 2023 19:04Current
8.2High risk
Vulners AI Score8.2
CVSS 3.15.3
EPSS0.02538
26