CVE-2023-20034
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-20034 is a vulnerability in the Elasticsearch database used in Cisco SD-WAN vManage software. It allows an unauthenticated remote attacker to access the Elasticsearch configuration database with elasticsearch user privileges. The vulnerability is caused by a static username and password configured on the vManage. An attacker can exploit this by sending a crafted HTTP request to the reachable vManage on port 9200, potentially gaining access to the Elasticsearch database content. There are workarounds available to address this vulnerability. The base severity is rated as HIGH, with a CVSS score of 7.5, indicating a significant potential danger to affected organizations' confidentiality.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions