Medium · 5.0 CVE-2023-24568 EUVD-2023-28584GHSA-8pp4-frh8-35px

Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow repla…

Published May 30, 2023 · Updated Jan 10, 2025 · Assigned by dell

Description

Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates.

Affected products

Vendor	Product	Affected	Fixed
Dell	NetWorker	19.8.0.0, 19.7.0.3 and prior releases, 19.7.1	—

Advisories 1

WID-SEC-2023-0901 Dell NetWorker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2023

References

https://www.dell.com/support/kbdoc/en-us/000210963/dsa-2023-059-dell-networker-security-update-for-a-rabbitmq-vulnerability-related-to-improper-validation-of-hostname-in-rabbitmq-startup-script-which-fails-to-replace-ca-signed-certificates vendor-advisory