Improper access control

2024-01-1920:15:00

PRIOn knowledge base

www.prio-n.com

improper access control

dataprotect

tls certificate validation

7.5 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.1%

JSON

Cohesity DataProtect prior to 6.8.1_u5 or 7.1 was discovered to have a incorrect access control vulnerability due to a lack of TLS Certificate Validation.

CPENameOperatorVersion
cohesity_dataplatformle7.0.1

CPE	Name	Operator	Version
	cohesity_dataplatform	le	7.0.1

References

cohesity.com

github.com/cohesity/SecAdvisory/blob/master/CVE-2023-33295.md