Skip to content
OpenAdvisories
High WID-SEC-2023-0901 2 CVEs

Dell NetWorker: Mehrere Schwachstellen

Published Apr 10, 2023 · Updated Apr 10, 2023 · de-DE

Vendor: Dell Product: NetWorker < 19.8.0.1 Platform: Linux Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Dell NetWorker ausnutzen, um beliebigen Programmcode auszuführen oder Sicherheitsvorkehrungen zu umgehen.

Product

Dell NetWorker stellt zentralisiert Backup- und Recovery-Dienste bereit.

Vulnerabilities 2

  • High 8.4
    CVE-2023-25539

    Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticat…

    Dell NetWorker NVE
  • Medium 5.0
    CVE-2023-24568

    Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which …

    Dell NetWorker

Revision history

  1. #1

    Initiale Fassung

References

  • Dell Security Advisory vom 2023-04-10
    https://www.dell.com/support/kbdoc/de-de/000211267/dsa-2023-060-dell-networker-security-update-for-an-nsrcapinfo-vulnerability
  • Dell Security Advisory vom 2023-04-10
    https://www.dell.com/support/kbdoc/de-de/000210963/dsa-2023-059-dell-networker-security-update-for-a-rabbitmq-vulnerability-related-to-improper-validation-of-hostname-in-rabbitmq-startup-script-which-fails-to-replace-ca-signed-certificates