CVE-2023-7248CWE-20

OpenText Vertica Management console might be prone to bypass via crafted requests

Medium · published March 15, 2024

CVSS v3.1
5.0
EPSS
0%
Percentile
23.3
In the wild
Unconfirmed
What it is

Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.

The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences.

This issue impacts the following Vertica Management Console versions:

10.x

11.1.1-24 or lower

12.0.4-18 or lower

Please upgrade to one of the following Vertica Management Console versions:

10.x to upgrade to latest versions from below.

11.1.1-25

12.0.4-19

23.x

24.x

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-03-15T19:30Z
EPSS history
Timeline
  • 15 MAR 19:30Z
    OpenText Vertica Management console might be prone to bypass via crafted requests
    cvelistv5