CVE-2023-7248

published 2024-03-15

CVE-2023-7248: Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests. The vulnerability would affect one of Vertica’s…

Priority P2 61 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.

The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences.
This issue impacts the following Vertica Management Console versions:
10.x
11.1.1-24 or lower
12.0.4-18 or lower

Please upgrade to one of the following Vertica Management Console versions:
10.x to upgrade to latest versions from below.
11.1.1-25
12.0.4-19
23.x
24.x

Affected

6 ranges

Vendor	Product	Version range	Fixed in
opentext	vertica	10.0.0-0 – 10.1.1-26	—
opentext	vertica	>= 11.0.0-0 < 11.1.1-25	11.1.1-25
opentext	vertica	>= 12.0.0-0 < 12.0.4-19	12.0.4-19
opentext	vertica_management_console	—	—
opentext	vertica_management_console	11.x – 11.1.1-24	—
opentext	vertica_management_console	12.x – 12.0.4-18	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20