Beveiligingsadvies

CVE-2023-6070

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-29 08:53:57

Laatst bijgewerkt 2024-10-11 17:56:19

Toegewezen door trellix

CVSS-score 4.3

Status PUBLISHED

Beschrijving

A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering configuration. This is possible through the certificate validation functionality where the API accepts uploaded content and doesn't parse for invalid data

← Alle CVE's bekijken Bekijk op cve.org ↗