An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality.
An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data that would normally be not accessible in the Query and Assertions functions.
References
| Link | Resource |
|---|---|
| https://security.nozominetworks.com/NN-2023:5-01 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 May 2024, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data that would normally be not accessible in the Query and Assertions functions. |
16 Aug 2023, 19:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://security.nozominetworks.com/NN-2023:5-01 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CPE | cpe:2.3:a:nozominetworks:cmc:*:*:*:*:*:*:*:* cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:* |
|
| First Time |
Nozominetworks
Nozominetworks cmc Nozominetworks guardian |
|
| CWE | CWE-863 |
09 Aug 2023, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-09 09:15
Updated : 2024-05-28 13:15
NVD link : CVE-2023-24471
Mitre link : CVE-2023-24471
JSON object : View
Products Affected
nozominetworks
- cmc
- guardian
CWE
CWE-863
Incorrect Authorization