Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-43762
HistorySep 22, 2023 - 12:00 a.m.

CVE-2023-43762

2023-09-2200:00:00
mitre
github.com
1
withsecure products
unauthenticated remote code execution
vulnerability
web server
policy manager 15
policy manager proxy 15

AI Score

7.6

Confidence

Low

EPSS

0.014

Percentile

86.7%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:withsecure:f-secure_policy_manager:15.00:*:*:*:*:linux_kernel:*:*"
    ],
    "vendor": "withsecure",
    "product": "f-secure_policy_manager",
    "versions": [
      {
        "status": "affected",
        "version": "15.00"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:withsecure:f-secure_policy_manager:15.00:*:*:*:*:windows:*:*"
    ],
    "vendor": "withsecure",
    "product": "f-secure_policy_manager",
    "versions": [
      {
        "status": "affected",
        "version": "15.00"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:withsecure:policy_manager_proxy:15.00:*:*:*:*:linux_kernel:*:*"
    ],
    "vendor": "withsecure",
    "product": "policy_manager_proxy",
    "versions": [
      {
        "status": "affected",
        "version": "15.00"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:withsecure:policy_manager_proxy:15.00:*:*:*:*:windows:*:*"
    ],
    "vendor": "withsecure",
    "product": "policy_manager_proxy",
    "versions": [
      {
        "status": "affected",
        "version": "15.00"
      }
    ],
    "defaultStatus": "unknown"
  }
]

AI Score

7.6

Confidence

Low

EPSS

0.014

Percentile

86.7%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

Related for VULNRICHMENT:CVE-2023-43762