Lucene search
PRIOn knowledge basePRION:CVE-2023-23127HistoryFeb 01, 2023 - 2:15 p.m.
Design/Logic Flaw
2023-02-0114:15:00
PRIOn knowledge base
www.prio-n.com
3
design/logic flaw
connectwise control
hsts
https
configuration option
troubleshooting
DISPUTEDIn Connectwise Control 22.8.10013.8329, the login page does not implement HSTS headers therefore not enforcing HTTPS. NOTE: the vendor’s position is that, by design, this is controlled by a configuration option in which a customer can choose to use HTTP (rather than HTTPS) during troubleshooting.
| CPE | Name | Operator | Version |
|---|---|---|---|
| connectwise | eq | 22.8.10013.8329 |
References
Related
vulnrichment
vulnrichment
CVE-2023-23127
2023-02-01 00:00:00
nvd
nvd
CVE-2023-23127
2023-02-01 14:15:09
cve
cve
CVE-2023-23127
2023-02-01 14:15:09
cvelist
cvelist
CVE-2023-23127
2023-02-01 00:00:00