CVE-2023-2538 TLS Private Key Accessible to External Parties

A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00 allows an unauthenticated remote attacker to retrieve the private key of the TLS certificate in use by the BMC via forced browsing. This can then be abused to perform...

Cisco Unified Communications Manager TLS SAN Field MitM (CSCuq86376)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device is affected by a security bypass vulnerability due to improper validation of the SAN field in TLS certificates. A remote attacker can impersonate a Cisco TelePresense Video Communication Server VCS...