CVE-2023-45083

Summary

CVE-2023-45083 is an Improper Privilege Management vulnerability that impacts the ability for a user to authenticate against the management plane in HyperCloud. This vulnerability allows an authenticated admin-level user to delete the "admin" or "serveradmin" users, which prevents subsequent authentication. It affects HyperCloud versions 1.0 to any release before 2.1. The vulnerability has a base severity rating of MEDIUM and a base score of 4.4 according to NIST. The exploitability score is 0.8, indicating a medium risk level. The attack vector is local, and high privileges are required for exploitation. The potential danger it poses to an organization is that it can lead to unauthorized access and compromise of the HyperCloud management plane, potentially resulting in data breaches or system disruptions. To remediate this vulnerability, organizations should update their HyperCloud installations to version 2.1 or later, which addresses the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.