PT-2023-30161 · Exagate · Exagate Sysguard 3001

Efe Ozel + 2 · Publicado 2023-09-14 · Atualizado 2026-05-21 · CVE-2023-4669

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Exagate SYSGuard 3001 versions prior to 3.2.20.0

Description The issue is related to an Authentication Bypass by Assumed-Immutable Data vulnerability, which allows for authentication bypass. This vulnerability affects Exagate SYSGuard 3001.

Recommendations For versions prior to 3.2.20.0, update to version 3.2.20.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-302

CWE-287

Identificadores relacionados

CVE-2023-4669

Produtos afetados

Exagate Sysguard 3001

Referências · 9

• https://usom.gov.tr/bildirim/tr-23-0525 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-4669 · Nota de Segurança
• https://twitter.com/cracbot/status/1702562950006161847 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-4669 · Aviso do Fabricante
• https://t.me/cveNotify/164371 · Publicação no Telegram
• https://t.me/cibsecurity/70519 · Publicação no Telegram
• https://t.me/cvenotify/88470 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1702396734708785432 · Publicação no Twitter
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0525 · Nota