Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2023-45349
HistoryOct 09, 2023 - 4:15 a.m.

CVE-2023-45349

2023-10-0904:15:50
mitre
web.nvd.nist.gov
30
atos
unify
openscape 4000
assistant
manager
vulnerability
information exposure
cve-2023-45349
osfourk-23722

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr. This is also known as OSFOURK-23722.

Affected configurations

Nvd
Node
atosunify_openscape_4000_assistantMatch10r0
OR
atosunify_openscape_4000_assistantMatch10r1
OR
atosunify_openscape_4000_assistantMatch10r1.42.0
OR
atosunify_openscape_4000_managerMatch10r0
OR
atosunify_openscape_4000_managerMatch10r1
OR
atosunify_openscape_4000_managerMatch10r1.42.0
VendorProductVersionCPE
atosunify_openscape_4000_assistant10cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r0:*:*:*:*:*:*
atosunify_openscape_4000_assistant10cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1:*:*:*:*:*:*
atosunify_openscape_4000_assistant10cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1.42.0:*:*:*:*:*:*
atosunify_openscape_4000_manager10cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:*:*:*:*:*:*
atosunify_openscape_4000_manager10cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*
atosunify_openscape_4000_manager10cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1.42.0:*:*:*:*:*:*

Related

prion 1
cvelist 1
nvd 1
vulnrichment 1
prion
prion
Design/Logic Flaw
2023-10-09 04:15:00
cvelist
cvelist
CVE-2023-45349
2023-10-09 00:00:00
nvd
nvd
CVE-2023-45349
2023-10-09 04:15:50
vulnrichment
vulnrichment
CVE-2023-45349
2023-10-09 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON
Related for CVE-2023-45349
prion1cvelist1nvd1vulnrichment1