PT-2023-18182 · Dassault Systèmes · Delmia Apriso
CVE-2023-2141
·
Publicado
2023-04-21
·
Atualizado
2023-06-07
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
DELMIA Apriso versions 2017 through 2022
Description
An unsafe .NET object deserialization could lead to post-authentication remote code execution.
Recommendations
For DELMIA Apriso versions 2017 through 2022, update to a version that fixes the unsafe .NET object deserialization issue to prevent post-authentication remote code execution.
As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.
Correção
Deserialization of Untrusted Data
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Delmia Apriso