Maple Labs

CVE search · CVE-2023-6070

CVE-2023-6070

medium 4.3

A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering configuration. This is possible through the certificate validation functionality where the API accepts uploaded content and doesn't parse for invalid data

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
trellixpsirt@trellix.com
Weakness
CWE-918

Severity

VersionScoreVectorSource
CVSS 3.1 medium 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N trellixpsirt@trellix.comSecondary
CVSS 3.1 medium 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • trellix · enterprise_security_manager

References