CVE-2023-23903 Vulnerability Details

  /     /     /  

CVE-2023-23903 Metadata Quick Info

CVE Published: 09/08/2023 | CVE Updated: 20/09/2024 | CVE Year: 2023
Source: Nozomi | Vendor: Nozomi Networks | Product: Guardian
Status : PUBLISHED

---

CVE-2023-23903 Description

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention.

Metrics

CVSS Version: 3.1 | Base Score: 4.9 MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

l➤ Exploitability Metrics:
    Attack Vector (AV)* NETWORK
    Attack Complexity (AC)* LOW
    Privileges Required (PR)* HIGH
    User Interaction (UI)* NONE
    Scope (S)* UNCHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* NONE
    Integrity Impact (I)* NONE
    Availability Impact (A)* HIGH

Weakness Enumeration (CWE)

CWE-ID: CWE-1286
CWE Name: CWE-1286 Improper Validation of Syntactic Correctness of Input
Source: Nozomi Networks

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID: CAPEC-153
CAPEC Description: CAPEC-153 Input Data Manipulation


Source: NVD (National Vulnerability Database).