CVE-2023-7248

OpenText Vertica Management console might be prone to bypass via crafted requests

State: Published
Severity: 5.0 Medium
Published: Mar 15, 2024
Updated: Aug 2, 2024
Reserved: Feb 26, 2024

Description

Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.

The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences. This issue impacts the following Vertica Management Console versions: 10.x 11.1.1-24 or lower 12.0.4-18 or lower

Please upgrade to one of the following Vertica Management Console versions: 10.x to upgrade to latest versions from below. 11.1.1-25 12.0.4-19 23.x 24.x

Scores

CVSS	Score	Vector	Source
3.1	5.0 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L	OpenText

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Vertica Management ConsoleOpentext	10.xAffected 11.x through 11.1.1-24Affected 12.x through 12.0.4-18Affected

References

https://portal.microfocus.com/s/article/KM000027542?language=en_US

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.