CVE-2023-45349: Undefined Security Weakness

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr...

CVE-2023-45349

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr...

CVE-2023-45349

Atos Unify OpenScape 4000 components are affected: Assistant and Manager, version lines V10 R1 prior to R1.34.7, V10 R1.42.0, and V10 R0. Also R1 for Manager. The issue exposes sensitive information that may allow lateral movement to the backup system via AShbr. Root cause details are not explici...

CVE-2023-45351

The connected PT-2023-29526 entry confirms an authenticated command injection vulnerability in Atos Unify OpenScape 4000 components: Assistant and Manager, specifically versions V10 R0 through V10 R1 before R1.42.1, with the issue arising from the AShbr component. The root cause is an insecure ha...

CVE-2023-45352

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This...

CVE-2023-45356

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pages of the platform portal. This is...

Atos Unify OpenScape Security Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from a lateral move to a backup system via AShbr...

CVE-2023-45354

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web interface. This is also known as OCMP-6589...

CVE-2023-45354

CVE-2023-45354 affects Atos Unify OpenScape Common Management Portal (OCMP) in OpenScape Common Management Portal V10 prior to R4.17.0 and V10 prior to R5.1.0. The issue arises from insufficient protection of service data within the web interface, enabling an authenticated remote attacker to exec...

Atos Unify OpenScape Security Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from the execution of arbitrary code on the operating system via the common management portal web interface...

Atos Unify OpenScape Code Issue Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from the execution of arbitrary code on the operating system through authenticated remote uploads via the common management portal web...

CVE-2023-45353

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting...

CVE-2023-45356

CVE-2023-45356 affects Atos Unify OpenScape 4000 Platform (V10 R1) and Manager Platform (V10 R1). The Red Hat/PTSecurity entries and OpenScape advisories confirm a root cause of insufficient input sanitization when processing dtb files, allowing an authenticated attacker to inject commands into t...

CVE-2023-45355

Vulnerability summary (CVE-2023-45355) Affects Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and OpenScape 4000 Manager Platform V10 R1 before Hotfix V10 R1.42.2. The issue is insufficient input validation in the platform webservice, enabling a authenticated attacker to perf...

CVE-2023-45355

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the webservice. This is also known as...

CVE-2023-45352

Summary: CVE-2023-45352 affects Atos Unify OpenScape Common Management Portal (OCMP). The vulnerability stems from a path traversal flaw in the web interface that allows an authenticated attacker to write outside the intended folders, potentially enabling arbitrary code execution on the operating...

PT-2023-29524 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions prior to V10 R1.34.7 Atos Unify OpenScape 4000 Manager versions prior to V10 R1.34.7 Description: The Atos Unify OpenScape 4000 exposes sensitive information, potentially allowing lateral movement ...

CVE-2023-45353

CVE-2023-45353 affects Atos Unify OpenScape Common Management Portal (OCMP) prior to V10 R4.17.0 and prior to V10 R5.1.0. An authenticated attacker can upload and create arbitrary files via the web interface, enabling arbitrary code execution on the underlying OS. Root cause: insecure authenticat...

CVE-2023-45351

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039...

CVE-2023-45351

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039...