by Kastro
Paper/Archive/CVE-2023-7248

CVE-2023-7248

Opentext Vertica Management Console — OpenText Vertica Management console might be prone to bypass via crafted requests

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
34
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 24.6.246 × 204.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.  The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences. This issue impacts the following Vertica Management Console versions: 10.x 11.1.1-24 or lower 12.0.4-18 or lower Please upgrade to one of the following Vertica Management Console versions: 10.x to upgrade to latest versions from below. 11.1.1-25 12.0.4-19 23.x 24.x

Affected

ProductAffectedFixed inSource
Vertica Management Console10.x–CNA
Vertica Management Console11.x – 11.1.1-24–CNA
Vertica Management Console12.x – 12.0.4-18–CNA
vertica_management_console10.0 – < 11.011.0CISA-ADP
vertica_management_console11.0 – 11.1.1-24–CISA-ADP
vertica_management_console12.0 – 12.0.4-18–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
OpenText (CNA)5.0CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refportal.microfocus.com/s/article/KM000027542?language=en_US