CVE-2023-45083

CVSS 3.1 Score 4.4 of 10 (medium)

Details

Published Dec 5, 2023
Updated: Dec 12, 2023
CWE ID 269

Summary

CVE-2023-45083 is an Improper Privilege Management vulnerability that impacts the ability for a user to authenticate against the management plane in HyperCloud. This vulnerability allows an authenticated admin-level user to delete the "admin" or "serveradmin" users, which prevents subsequent authentication. It affects HyperCloud versions 1.0 to any release before 2.1. The vulnerability has a base severity rating of MEDIUM and a base score of 4.4 according to NIST. The exploitability score is 0.8, indicating a medium risk level. The attack vector is local, and high privileges are required for exploitation. The potential danger it poses to an organization is that it can lead to unauthorized access and compromise of the HyperCloud management plane, potentially resulting in data breaches or system disruptions. To remediate this vulnerability, organizations should update their HyperCloud installations to version 2.1 or later, which addresses the issue.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-45083 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options