PT-2023-28777
CVE-2023-43320
·
تاريخ النشر
2023-09-27
·
تاريخ التحديث
2024-10-29
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Proxmox VE versions 5.4 through 8.0
Proxmox Backup Server versions 1.1 through 3.0
Proxmox Mail Gateway versions 7.1 through 8.0
Description
An issue in Proxmox products allows a remote authenticated attacker to escalate privileges via bypassing the two-factor authentication component.
Recommendations
For Proxmox VE versions 5.4 through 8.0, update to a version that includes a fix for this issue.
For Proxmox Backup Server versions 1.1 through 3.0, update to a version that includes a fix for this issue.
For Proxmox Mail Gateway versions 7.1 through 8.0, update to a version that includes a fix for this issue.
As a temporary workaround, consider disabling the two-factor authentication bypass component until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾