PT-2023-5525 · Nozomi · Nozomi Guardian+1

Stefano Libero · Published 2023-08-09 · Updated 2024-09-20 · CVE-2023-23903

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nozomi Guardian and Nozomi Central Management Console (CMC) (affected versions not specified)

Description The issue is related to the SAML (Security Assertion Markup Language) technology, where an authenticated administrator can upload a SAML configuration file with the wrong format. The application does not check the correct file format, leading to every subsequent application request returning an error. This renders the whole application unusable until a console intervention is made. The vulnerability is associated with insufficient input validation when uploading configuration files, which can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

CWE-1286

Related Identifiers

BDU:2023-06175

CVE-2023-23903

Affected Products

Nozomi Central Management Console

Nozomi Guardian

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-23903 · Security Note
• https://bdu.fstec.ru/vul/2023-06175 · Security Note
• https://security.nozominetworks.com/NN-2023:7-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-23903 · Vendor Advisory
• https://t.me/cvenotify/81151 · Telegram Post
• https://t.me/cvenotify/56081 · Telegram Post
• https://t.me/cvenotify/95401 · Telegram Post
• https://t.me/cvenotify/56068 · Telegram Post
• https://twitter.com/NUYTSTECH/status/1691088799017971712 · Twitter Post