Skip to content
Sign in
2.7 Low

CVE-2023-2622 Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of…

Description

Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.

Affected products and versions

Product Affected versions Fixed in
MACH System Software 7.10 7.10.0.0 → 7.18.0.0 No fix stated

Other CVEs of MACH System Software

The 2 CVEs of MACH System Software →
CVE-2023-2621 The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the… 6.5 Medium
Track this CVE