Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1

🗓️ 10 Apr 2024 00:00:00Reported by Nozomi Networks PSIRTType

Audit records for OpenAPI requests may expose sensitive data; upgrade to v23.4.1 and restrict API access.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the OpenAPI audit tool for detecting and tracking network activities, Nozomi Guardian, and the Nozomi Central Management Console (CMC), a centralized security management tool, allows attackers to gain access to protected information.	23 Jul 202400:00	–	bdu_fstec
CNNVD	Nozomi Networks Guardian/CMC 安全漏洞	10 Apr 202400:00	–	cnnvd
CVE	CVE-2023-6916	10 Apr 202415:50	–	cve
Cvelist	CVE-2023-6916 Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1	10 Apr 202415:50	–	cvelist
EUVD	EUVD-2023-59115	3 Oct 202520:07	–	euvd
ICS	Siemens RUGGEDCOM APE1808	14 May 202400:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	14 May 202400:00	–	ncsc
NVD	CVE-2023-6916	10 Apr 202416:15	–	nvd
Positive Technologies	PT-2024-5072 · Nozomi · Nozomi Central Management Console +1	10 Apr 202400:00	–	ptsecurity
Vulnrichment	CVE-2023-6916 Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1	10 Apr 202415:50	–	vulnrichment