PT-2024-15249 · Opentext · Opentext Vertica Management Console

Published 2024-03-15 · Updated 2024-07-26 · CVE-2023-7248

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenText Vertica Management Console versions 10.x OpenText Vertica Management Console versions 11.1.1-24 or lower OpenText Vertica Management Console versions 12.0.4-18 or lower

Description The issue affects one of Vertica's authentication functionalities, allowing specially crafted requests and sequences to bypass certain functionality in the OpenText Vertica Management console.

Recommendations For OpenText Vertica Management Console versions 10.x, upgrade to the latest version. For OpenText Vertica Management Console versions 11.1.1-24 or lower, upgrade to version 11.1.1-25. For OpenText Vertica Management Console versions 12.0.4-18 or lower, upgrade to version 12.0.4-19. Alternatively, consider upgrading to versions 23.x or 24.x.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2023-7248

Affected Products

Opentext Vertica Management Console

References · 5

• https://portal.microfocus.com/s/article/KM000027542?language=en_US · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-7248 · Security Note
• https://osv.dev/vulnerability/CVE-2023-7248 · Vendor Advisory
• https://t.me/cvenotify/87608 · Telegram Post
• https://twitter.com/CVEnew/status/1768723306843177401 · Twitter Post