CVE-2023-23903
CVSS V2 None
CVSS V3 None
Description
An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error.
The whole application in rendered unusable until a console intervention.
Overview
- CVE ID
- CVE-2023-23903
- Assigner
- prodsec@nozominetworks.com
- Vulnerability Status
- Analyzed
- Published Version
- 2023-08-09T10:15:09
- Last Modified Date
- 2023-08-16T19:44:20
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:nozominetworks:cmc:*:*:*:*:*:*:*:* | 1 | OR | 22.6.2 | |
| cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:* | 1 | OR | 22.6.2 |
References
| Reference URL | Reference Tags |
|---|---|
| https://security.nozominetworks.com/NN-2023:7-01 | Vendor Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-23903 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23903 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-09-06 03:22:25 | Added to TrackCVE | |||
| 2023-09-06 03:22:26 | Weakness Enumeration | new |