PT-2024-5072 · Nozomi · Nozomi Guardian+1

Maciej Kosz · Published 2024-04-10 · Updated 2024-09-20 · CVE-2023-6916

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Nozomi Guardian and Nozomi Central Management Console (CMC) (affected versions not specified) OpenAPI (affected versions not specified)

Description: The issue is related to insufficient protection of audit records for OpenAPI requests, which may include sensitive information. This could lead to unauthorized accesses and privilege escalation.

Recommendations: For Nozomi Guardian and Nozomi Central Management Console (CMC), consider restricting access to audit records to minimize the risk of exploitation. For OpenAPI, as a temporary workaround, consider disabling the logging of sensitive information in audit records until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-201

CWE-522

Related Identifiers

BDU:2024-05599

CVE-2023-6916

Affected Products

Nozomi Central Management Console

Nozomi Guardian

References · 10

• https://bdu.fstec.ru/vul/2024-05599 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6916 · Security Note
• https://t.me/cvenotify/81157 · Telegram Post
• https://security.nozominetworks.com/NN-2023:17-01 · Note
• https://t.me/cvenotify/95404 · Telegram Post
• https://vuldb.com/ru/?id.260212 · Note
• https://tenable.com/cve/CVE-2023-6916 · Note
• https://debricked.com/vulnerability-database/vulnerability/CVE-2023-6916 · Note
• https://cert-portal.siemens.com/productcert/html/ssa-292022.html · Note
• https://twitter.com/CVEnew/status/1778118932043292816 · Twitter Post