Lucene search
PRIOn knowledge basePRION:CVE-2023-23130HistoryFeb 01, 2023 - 2:15 p.m.
Authentication flaw
2023-02-0114:15:00
PRIOn knowledge base
www.prio-n.com
5
connectwise automate
2022.11
cleartext authentication
http
ssl
configuration option
DISPUTED Connectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being done via HTTP (cleartext) with SSL disabled. OTE: the vendor’s position is that, by design, this is controlled by a configuration option in which a customer can choose to use HTTP (rather than HTTPS) during troubleshooting.
References
Related
cvelist
cvelist
CVE-2023-23130
2023-02-01 00:00:00
cve
cve
CVE-2023-23130
2023-02-01 14:15:09
vulnrichment
vulnrichment
CVE-2023-23130
2023-02-01 00:00:00
nvd
nvd
CVE-2023-23130
2023-02-01 14:15:09