PT-2023-27376 · Opennms · Opennms Meridian+1
CVE-2023-40313
·
Publicado
2023-08-17
·
Atualizado
2024-10-08
CVSS v3.1
7.1
Alta
| Vetor | AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
OpenNMS Horizon versions prior to 32.0.2
OpenNMS Meridian versions prior to 2023.1.6
OpenNMS Meridian versions prior to 2022.1.19
OpenNMS Meridian versions prior to 2021.1.30
OpenNMS Meridian versions prior to 2020.1.38
Description
A BeanShell interpreter in remote server mode could allow arbitrary remote Java code execution. The software is intended for installation within an organization's private networks and should not be directly accessible from the Internet.
Recommendations
To resolve the issue, upgrade to OpenNMS Meridian 2023.1.6 or newer.
To resolve the issue, upgrade to OpenNMS Meridian 2022.1.19 or newer.
To resolve the issue, upgrade to OpenNMS Meridian 2021.1.30 or newer.
To resolve the issue, upgrade to OpenNMS Meridian 2020.1.38 or newer.
To resolve the issue, upgrade to OpenNMS Horizon 32.0.2 or newer.
Exploit
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Opennms Horizon
Opennms Meridian