CVE-2023-34329

Опубликовано: 18 июл. 2023

Источник: nvd

CVSS3: 9.1

CVSS3: 8

EPSS Низкий

Описание

AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:ami:megarac_sp-x:12:-:*:*:*:*:*:*

cpe:2.3:o:ami:megarac_sp-x:13:-:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.00018

Низкий

9.1 Critical

CVSS3

8 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

GHSA-7qr2-m63g-5xr4

CVSS3: 9.1

github

больше 2 лет назад

AMI SPx contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP header. A successful exploit of this vulnerability may lead to loss of confidentiality, integrity, and availability.

EPSS

Процентиль: 4%

0.00018

Низкий

9.1 Critical

CVSS3

8 High

CVSS3

Дефекты

CWE-290