Lucene search
HistoryJan 19, 2024 - 8:15 p.m.
CVE-2023-33295
cohesity dataprotect
tls
certificate validation
vulnerability
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.1%
Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation.
Affected configurations
Node
cohesitycohesity_dataplatformRange≤7.0.1
Related
cve
cve
CVE-2023-33295
2024-01-19 20:15:10
cvelist
cvelist
CVE-2023-33295
2024-01-19 00:00:00
prion
prion
Improper access control
2024-01-19 20:15:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
18.1%
Related for NVD:CVE-2023-33295