Lucene search

[email protected]NVD:CVE-2023-45352

HistoryOct 09, 2023 - 4:15 a.m.

CVE-2023-45352

2023-10-0904:15:54

CWE-22

[email protected]

web.nvd.nist.gov

atos

unify

openscape

management

v10

r4.17.0

v10

r5.1.0

path traversal

cve-2023-45352

common management portal

operating system

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

JSON

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This is also known as OCMP-6592.

Affected configurations

NVD

Node

atosunify_openscape_common_managementMatch10-

References

networks.unify.com/security/advisories/OBSO-2306-02.pdf

www.news.de/technik/857003738/unify-openscape-common-management-platform-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-update-zu-bekannten-schwachstellen-und-sicherheitsluecken-vom-03-07-2023/1/

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

JSON

Related for NVD:CVE-2023-45352

cve1 prion1 cvelist1