PT-2023-19972
CVE-2023-25192
·
تاريخ النشر
2023-02-15
·
تاريخ التحديث
2025-03-19
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
AMI MegaRAC SPX versions prior to SPx12-update-7.00
AMI MegaRAC SPX versions prior to SPx13-update-5.00
Description
The issue allows user enumeration through Redfish.
Recommendations
For versions prior to SPx12-update-7.00, update to SPx12-update-7.00 to resolve the issue.
For versions prior to SPx13-update-5.00, update to SPx13-update-5.00 to resolve the issue.
As a temporary workaround, consider restricting access to Redfish until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾