CVE-2023-45349

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr. This is also known as OSFOURK-23722.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r0:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1.42.0:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1.42.0:*:*:*:*:*:*

History

12 Oct 2023, 18:36

Type Values Removed Values Added
References (MISC) https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - (MISC) https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - Press/Media Coverage
References (MISC) https://networks.unify.com/security/advisories/OBSO-2306-01.pdf - (MISC) https://networks.unify.com/security/advisories/OBSO-2306-01.pdf - Vendor Advisory
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
First Time Atos
Atos unify Openscape 4000 Assistant
Atos unify Openscape 4000 Manager
CPE cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r0:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_assistant:10:r1.42.0:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1.42.0:*:*:*:*:*:*

09 Oct 2023, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-09 04:15

Updated : 2023-12-10 15:14


NVD link : CVE-2023-45349

Mitre link : CVE-2023-45349

CVE.ORG link : CVE-2023-45349


JSON object : View

Products Affected

atos

  • unify_openscape_4000_assistant
  • unify_openscape_4000_manager