HIGH🇵🇱 Wersja polska

CVE-2023-45349

CVSS 7.5v3.1pub. 2023-10-09upd. 2024-11-21

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr. This is also known as OSFOURK-23722.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Atos Unify Openscape 4000 Assistant

    APP
    Atos
    10

  • Atos Unify Openscape 4000 Manager

    APP
    Atos
    10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-35034CRITICAL9.8PL ✓same product

RCE dla nieuwierzytelnionych użytkowników w Atos Unify OpenScape 4000

CVE-2023-29474CRITICAL9.8PL ✓same product

RCE bez uwierzytelnienia w Atos Unify OpenScape 4000 – command injection

CVE-2023-29475CRITICAL9.8PL ✓same product

RCE bez uwierzytelnienia w Atos Unify OpenScape 4000 Platform

CVE-2023-29473CRITICAL9.8PL ✓same product

RCE bez uwierzytelnienia w Atos Unify OpenScape 4000 Platform

CVE-2022-46404CRITICAL9.8PL ✓same product

Command injection w Atos Unify OpenScape 4000 — dostęp administracyjny bez uwierzytelnienia