PT-2023-29400 · Unknown · Hypercloud

CVE-2023-45083 · Publicado 2023-12-05 · Atualizado 2023-12-12

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions HyperCloud versions 1.0 through 2.0

Description An Improper Privilege Management issue exists that impacts user authentication against the management plane. An authenticated admin-level user may be able to delete the admin or serveradmin users, preventing subsequent authentication attempts from succeeding.

Recommendations For HyperCloud versions 1.0 through 2.0, update to version 2.1 or later to resolve the issue. As a temporary workaround, consider restricting the ability of admin-level users to delete the admin or serveradmin users until a patch is available.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2023-45083

Produtos afetados

Hypercloud

Referências · 4

• https://advisories.softiron.cloud · Nota
• https://twitter.com/CVEnew/status/1732080746700198131 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-45083 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-45083 · Aviso do Fabricante