CVE-2023-6263

Опубликовано: 22 нояб. 2023

Источник: nvd

CVSS3: 8.3

CVSS3: 8.1

EPSS Низкий

Описание

An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitimate client connects to the fake VMS server.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:networkoptix:nxcloud:*:*:*:*:*:*:*:*

Версия до 23.1.0.40440 (исключая)

EPSS

Процентиль: 37%

0.00163

Низкий

8.3 High

CVSS3

8.1 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

GHSA-xh6m-2h5x-55mh

CVSS3: 8.3

github

около 2 лет назад

An issue was discovered in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers from legitimate users when the legitimate client connects to the fake VMS server.

EPSS

Процентиль: 37%

0.00163

Низкий

8.3 High

CVSS3

8.1 High

CVSS3

Дефекты

CWE-290