Aller au contenu
Se connecter
2.7 Faible

CVE-2023-2622 Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of…

Description

Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read.

Produits et versions touchés

Produit Versions touchées Corrigé en
MACH System Software 7.10 7.10.0.0 → 7.18.0.0 Pas de correctif indiqué

Autres CVE de MACH System Software

Les 2 CVE de MACH System Software →
CVE-2023-2621 The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the… 6.5 Moyenne
Suivre cette CVE