CVE-2023-24015
Medium
Description
A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user forcing a report to be saved with its name set as null. The reports section will be partially unavailable for all later attempts to use it, with the report list seemingly stuck on loading.
SeverityMedium
CVSS4.3
Exploit probability—
ProductNozominetworks Cmc
PublishedAug 9, 2023
First seenAug 9, 2023
Weakness typeCWE-1286CWE-1286
How to fix
Update
- nozominetworks cmc22.6.2 or later
- nozominetworks guardian22.6.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nozominetworks cmc | v < 22.6.2 | 22.6.2 |
| nozominetworks guardian | v < 22.6.2 | 22.6.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.