Lucene search

VmwareCVELIST:CVE-2023-34037

HistoryAug 04, 2023 - 11:18 a.m.

CVE-2023-34037

2023-08-0411:18:19

vmware

www.cve.org

vmware

horizon server

http request smuggling

vulnerability

network access

malicious actor

http smuggle requests

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

VMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with network access may be able to perform HTTP smuggle requests.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "VMware Horizon Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Horizon Server 2306, Horizon Server 2303, Horizon Server 2212, Horizon Server 2209, Horizon Server 2206, Horizon Server 2111.x, Horizon Server 2106, Horizon Server 2103, Horizon Server 2012, Horizon Server 2006"
      }
    ]
  }
]

References

www.vmware.com/security/advisories/VMSA-2023-0017.html

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

5.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

Related for CVELIST:CVE-2023-34037