CVE-2023-46128

Summary

CVE-2023-46128 is a vulnerability affecting Nautobot, a Network Automation Platform using the Django Python framework and PostgreSQL or MySQL database. In versions 2.0.x, specific REST API endpoints, when accessed with the `?depth=<N>` query parameter, disclose hashed user passwords from the database to authenticated users. It is important to note that the passwords are not exposed in plaintext. This issue has been rectified in Nautobot version 2.0.3.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.