Artikelnummer: 000210963
DSA-2023-059: Dell NetWorker Security Update for an Improper Validation Vulnerability
Samenvatting: Dell NetWorker remediation is available for an improper validation vulnerability that could be exploited by malicious users to compromise the affected system.
Article content
Impact
High
Gegevens
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2023-24568 | Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates. | 5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2023-24568 | Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates. | 5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N |
Getroffen producten en herstel
| CVE Addressed | Product | Affected Version(s) | Updated Version(s) | Link to Update |
| CVE-2023-24568 | Dell NetWorker |
19.8.0.0, 19.7.0.3 and prior releases, 19.7.1 |
19.8.0.1 & Later releases 19.7.0.4 & Later releases |
https://www.dell.com/support/home/product-support/product/networker/drivers |
| CVE Addressed | Product | Affected Version(s) | Updated Version(s) | Link to Update |
| CVE-2023-24568 | Dell NetWorker |
19.8.0.0, 19.7.0.3 and prior releases, 19.7.1 |
19.8.0.1 & Later releases 19.7.0.4 & Later releases |
https://www.dell.com/support/home/product-support/product/networker/drivers |
NW server impacted with this vulnerability and applicable platforms are windows and linux.
Revisiegeschiedenis
| Revision | Date | Description |
| 1.0 | 2023-04-03 | Initial Release |
| 2.0 | 2023-05-11 | Made changes to the Updated Versions |
| 3.0 | 2023-07-20 | Made changes to "CVSS Base Score" and "CVSS Vector String" under "Proprietary Code" section |
Verwante informatie
Juridische informatie
Artikeleigenschappen
Getroffen product
NetWorker Family, NetWorker, NetWorker Series, NetWorker Module, Product Security Information
Datum laatst gepubliceerd
20 jul. 2023
Artikeltype
Dell Security Advisory