CVE-2023-43082
CVSS V2 None
CVSS V3 None
Description
Dell Unity prior to 5.3 contains a 'man in the middle' vulnerability in the vmadapter component. If a customer has a certificate signed by a third-party public Certificate Authority, the vCenter CA could be spoofed by an attacker who can obtain a CA-signed certificate.
Overview
- CVE ID
- CVE-2023-43082
- Assigner
- dell
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-11-22T16:16:08.393Z
- Last Modified Date
- 2023-11-22T16:16:08.393Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000213152/dsa-2023-141-dell-unity-unity-vsa-and-unity-xt-security-update-for-multiple-vulnerabilities | vendor-advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-43082 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43082 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-25 16:06:14 | Added to TrackCVE |