CVE-2023-43762

CVE Database · CVE-2023-43762

CVE-2023-43762

· CRITICALModified

CVSS v3.1

9.8

EPSS

1.13%

Published

Sep 22, 2023

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (4)

withsecure · f-secure_policy_managervulnerable

withsecure · policy_manager_proxyvulnerable

References (6)

https://www.withsecure.com/en/support/security-advisories

Vendor Advisory

https://www.withsecure.com/en/support/security-advisories/cve-2023-43762

https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn511

Broken Link

https://www.withsecure.com/en/support/security-advisories

Vendor Advisory

https://www.withsecure.com/en/support/security-advisories/cve-2023-43762

https://www.withsecure.com/en/support/security-advisories/cve-2023-nnn511

Broken Link

KEV Catalog EPSS Scores Vendors All CVEs