CVE-2023-7248

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Certain functionality in OpenText Vertica Management console might be prone to bypass via crafted requests.

The vulnerability would affect one of Vertica’s authentication functionalities by allowing specially crafted requests and sequences. This issue impacts the following Vertica Management Console versions: 10.x 11.1.1-24 or lower 12.0.4-18 or lower

Please upgrade to one of the following Vertica Management Console versions: 10.x to upgrade to latest versions from below. 11.1.1-25 12.0.4-19 23.x 24.x

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Mar 15, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-72499.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Directory Services allows CVE-2023-72505.3A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send CVE-2023-72516.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeff Starr User Submitted Posts allows CVE-2023-72525.3The Tickera WordPress plugin before 3.5.2.5 does not prevent users from leaking other users' tickets.CVE-2023-72536.1The Import WP WordPress plugin before 2.13.1 does not prevent users with the administrator role from pinging conducting SSRF attacks, which CVE-2023-72564.4In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and po CVE-2023-72586.5A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it CVE-2023-72592.4** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown CVE-2023-72607.5Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitra CVE-2023-72617.8Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation CVE-2023-72637.3Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthor CVE-2023-72649.8The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, an