CVE-2023-23903mediumCWE-1286

CVE-2023-23903: falha de média gravidade em Nozomi Networks Guardian

DoS via SAML configuration in Guardian/CMC before 22.6.2

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CMC+ Monitorar Guardian

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.6%
An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Nozomi Networks · CMCNozomi Networks · Guardian
CVEs relacionadas — Nozomi Networks Guardian

No mesmo produto, das mais perigosas para as menos.

CVE-2021-26724HIGHAuthenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.4EPSS 2.8%CVE-2026-33924HIGHAuthenticated RCE in update functionality in Guardian/CMC before 26.4.0EPSS 1.1%CVE-2021-26725HIGHAuthenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4EPSS 1.1%CVE-2024-13089HIGHAuthenticated RCE in update functionality in Guardian/CMC before 24.6.0EPSS 1.1%CVE-2022-0551HIGHAuthenticated RCE on project configuration import in Guardian/CMC before 22.0.0EPSS 0.9%CVE-2022-0550HIGHAuthenticated RCE on logo report upload in Guardian/CMC before 22.0.0EPSS 0.9%